Re: CVE-2016-10229 in 4.4.x series

From	Willy Tarreau <w@1wt.eu>
Newsgroups	linux.kernel
Subject	Re: CVE-2016-10229 in 4.4.x series
Date	2017-05-16 08:10 +0200
Message-ID	<tHDQd-1Wi-5@gated-at.bofh.it> (permalink)
References	<tHzjA-7hu-9@gated-at.bofh.it> <tHDdw-1qC-13@gated-at.bofh.it> <tHDGy-1Df-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Mon, May 15, 2017 at 10:53:50PM -0700, Steven Pease wrote:
> Is there any particular reason that the CVE appears to be filed
> against 4.4.60? Or is this just a mistake?
> 
> http://www.cvedetails.com/cve/CVE-2016-10229/

I have no idea why. Maybe they mentionned the current version at the
moment the CVE was issued (which seems to match). In fact this bug was
discovered as being a vulnerability long after the bug was fixed.

Willy

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

CVE-2016-10229 in 4.4.x series Steven Pease <spease@suitabletech.com> - 2017-05-16 03:20 +0200
  Re: CVE-2016-10229 in 4.4.x series Willy Tarreau <w@1wt.eu> - 2017-05-16 07:30 +0200
    Re: CVE-2016-10229 in 4.4.x series Steven Pease <spease@suitabletech.com> - 2017-05-16 08:00 +0200
      Re: CVE-2016-10229 in 4.4.x series Willy Tarreau <w@1wt.eu> - 2017-05-16 08:10 +0200

csiph-web