Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1553896 > unrolled thread

patch 4.8 "net: handle no dst on skb in icmp6_send"

Back to article view | Back to linux.kernel

Contents

  patch 4.8 "net: handle no dst on skb in icmp6_send" Bronek Kozicki <brok@spamcop.net> - 2017-01-08 16:20 +0100
    Re: patch 4.8 "net: handle no dst on skb in icmp6_send" Jiri Slaby <jslaby@suse.cz> - 2017-01-11 17:00 +0100
    Re: patch 4.8 "net: handle no dst on skb in icmp6_send" Bronek Kozicki <brok@spamcop.net> - 2017-01-11 17:00 +0100
    Re: patch 4.8 "net: handle no dst on skb in icmp6_send" Jiri Slaby <jslaby@suse.cz> - 2017-01-11 17:00 +0100

#1553896 — patch 4.8 "net: handle no dst on skb in icmp6_send"

Hello,

any particular reason why this fix 
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2 
was missed from stable 4.8 line? Apparently the bug being fixed has its 
own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919

Thank you for your hard work and best regards


B.

[toc] | [next] | [standalone]

#1556655

On 01/11/2017, 04:56 PM, Bronek Kozicki wrote:
> On 11/01/2017 15:50, Jiri Slaby wrote:
>> On 01/08/2017, 03:28 PM, Bronek Kozicki wrote:
>>> Hello,
>>>
>>> any particular reason why this fix
>>> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2
>>>
>>> was missed from stable 4.8 line? Apparently the bug being fixed has its
>>> own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919
>>
>> The patch is marked as:
>> Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3
>> domain")
>>
>> and that is only in 4.9. So there seems to be a little point backporting
>> to older kernels.
> 
> 
> it is water under the bridge now, but I started this thread because I
> noticed that some distributions are adding this to their own 4.8 kernels

Which actually makes sense now, given 5d41ce29e *was* backported to 4.8.

-- 
js
suse labs

[toc] | [prev] | [next] | [standalone]

#1556657

On 11/01/2017 15:50, Jiri Slaby wrote:
> On 01/08/2017, 03:28 PM, Bronek Kozicki wrote:
>> Hello,
>>
>> any particular reason why this fix
>> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2
>> was missed from stable 4.8 line? Apparently the bug being fixed has its
>> own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919
>
> The patch is marked as:
> Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3
> domain")
>
> and that is only in 4.9. So there seems to be a little point backporting
> to older kernels.


it is water under the bridge now, but I started this thread because I 
noticed that some distributions are adding this to their own 4.8 kernels


B.

[toc] | [prev] | [next] | [standalone]

#1556658

On 01/08/2017, 03:28 PM, Bronek Kozicki wrote:
> Hello,
> 
> any particular reason why this fix
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2
> was missed from stable 4.8 line? Apparently the bug being fixed has its
> own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919

The patch is marked as:
Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3
domain")

and that is only in 4.9. So there seems to be a little point backporting
to older kernels.

thanks,
-- 
js
suse labs

[toc] | [prev] | [standalone]

Back to top | Article view | linux.kernel

csiph-web