Hi
Here is a batch of critical fixes for 4.16.
/Jarkko
The following changes since commit a02633e9b13dcb9b1a656b08f81bc8ba2d4d2294:
Merge tag 'v4.16-rc2' into next-general (2018-02-21 08:21:41 -0800)
are available in the Git repository at:
git://git.infradead.org/users/jjs/linux-tpmdd.git tags/tpmdd-next-20180226
for you to fetch changes up to 895fbcaba75da05f6337ffaf750778c3a8ee9158:
tpm_tis: fix potential buffer overruns caused by bit glitches on the bus (2018-02-26 14:33:57 +0200)
----------------------------------------------------------------
tpmdd fixes for Linux 4.16
----------------------------------------------------------------
Jeremy Boone (5):
tpm: fix potential buffer overruns caused by bit glitches on the bus
tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
tpm_tis: fix potential buffer overruns caused by bit glitches on the bus
drivers/char/tpm/st33zp24/st33zp24.c | 4 ++--
drivers/char/tpm/tpm-interface.c | 4 ++++
drivers/char/tpm/tpm2-cmd.c | 4 ++++
drivers/char/tpm/tpm_i2c_infineon.c | 5 +++--
drivers/char/tpm/tpm_i2c_nuvoton.c | 8 ++++++--
drivers/char/tpm/tpm_tis_core.c | 5 +++--
6 files changed, 22 insertions(+), 8 deletions(-)
On Mon, 26 Feb 2018, Jarkko Sakkinen wrote:
> Hi
>
> Here is a batch of critical fixes for 4.16.
>
Do you have CVEs for these? If so, please include them in the commit
messages.
--
James Morris
<[email protected]>
On Tue, 2018-02-27 at 05:52 +1100, James Morris wrote:
> On Mon, 26 Feb 2018, Jarkko Sakkinen wrote:
>
> >
> > Hi
> >
> > Here is a batch of critical fixes for 4.16.
> >
>
> Do you have CVEs for these? If so, please include them in the commit
> messages.
Heh, well, I suppose from this everyone now knows they're fixes for
vulnerabilities. The CVE doesn't usually show up until after the
embargo is released, so we don't have one yet.
James
On Mon, 26 Feb 2018, James Bottomley wrote:
> On Tue, 2018-02-27 at 05:52 +1100, James Morris wrote:
> > On Mon, 26 Feb 2018, Jarkko Sakkinen wrote:
> >
> > >
> > > Hi
> > >
> > > Here is a batch of critical fixes for 4.16.
> > >
> >
> > Do you have CVEs for these? If so, please include them in the commit
> > messages.
>
> Heh, well, I suppose from this everyone now knows they're fixes for
> vulnerabilities. The CVE doesn't usually show up until after the
> embargo is released, so we don't have one yet.
Anyone with half a brain can read Linus' -rc commits and work it out.
--
James Morris
<[email protected]>