Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751835AbcDUMFu (ORCPT ); Thu, 21 Apr 2016 08:05:50 -0400 Received: from mail-wm0-f54.google.com ([74.125.82.54]:38650 "EHLO mail-wm0-f54.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751302AbcDUMFs (ORCPT ); Thu, 21 Apr 2016 08:05:48 -0400 Subject: Re: stable-security kernel updates To: Sasha Levin , LKML , stable References: <5717DD8A.4000707@oracle.com> <571876AB.2060106@suse.cz> <5718B57D.4000504@oracle.com> <5718C0B8.8010609@suse.cz> Cc: lwn@lwn.net From: Jiri Slaby Message-ID: <5718C215.7060703@suse.cz> Date: Thu, 21 Apr 2016 14:05:41 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: <5718C0B8.8010609@suse.cz> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="SaC5xLQHNgl5EqhxTfL7Djtbcsh5j0Bgn" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2176 Lines: 59 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --SaC5xLQHNgl5EqhxTfL7Djtbcsh5j0Bgn Content-Type: multipart/mixed; boundary="Ih8lJsFlFLTaLkRE1riKX60kGQPRgAs02" From: Jiri Slaby To: Sasha Levin , LKML , stable Cc: lwn@lwn.net Message-ID: <5718C215.7060703@suse.cz> Subject: Re: stable-security kernel updates References: <5717DD8A.4000707@oracle.com> <571876AB.2060106@suse.cz> <5718B57D.4000504@oracle.com> <5718C0B8.8010609@suse.cz> In-Reply-To: <5718C0B8.8010609@suse.cz> --Ih8lJsFlFLTaLkRE1riKX60kGQPRgAs02 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 04/21/2016, 01:59 PM, Jiri Slaby wrote: >> (CVE-2016-2085) 613317b EVM: Use crypto_memneq() for digest comparison= s >=20 > Does not exist in the CVE database/is not confirmed yet AFAICS. And now I am looking at the patch and I remember why I threw it away. crypto_memneq is not in 3.12 yet and I was not keen enough to backport i= t. thanks, --=20 js suse labs --Ih8lJsFlFLTaLkRE1riKX60kGQPRgAs02-- --SaC5xLQHNgl5EqhxTfL7Djtbcsh5j0Bgn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXGMIVAAoJEL0lsQQGtHBJPu0QAIlv7wEHWE0Jj3w4CYI9afLM gVH4nRu59PqyDSdKh1Idz4e2qKKZfrBV8EpgqW+PIii5A29eFTnuC/9whksGiayJ DAA/NBu0RZH0jC3TY+gdsAszaLm/WBd6WEf5mBpFZ4kpaytCyv9blA59KU/+aa9e Tzx0t3e2mTswye3q7pUAviKz1Z6/s/muZNH8ytYRR/uHTsOUPUfjnuj8IZZgrTVr nt6FsyFs/iwMD8ktbp9p+6ddxzUO3h/m/x5OPdQSa6JZom1D+0ObCF+SJ5Rmq74Z I3jGSBGF9PzYHOuolvX8jGSLAdXegme8L0c0jdTuCfPNgczIBZMkehI+idINDnMb E2YlPJe2nW0T97QNkyxzmcBXvZgnzCChijUYwH0yJDz59NUx5dYCncFE6N/Wd9S2 dKydCrAczHdh5CZVYhcFk2bdlWKfeSSGWl6bkeM5DdacWocJSRADlY3zw9NsmvVG 4qUoYfy4hKwoe+HeZHdMi2nydOrCV68fAL5PfmXFAKOg0N2BGoNC73MpuEJuZ+Jm e1/+XnznI8tzoCyNaz2ZL0gULAdQNyjecib69QyUJenGCsxPFGJ0u3Z1rV2N7gYo AYFm5B4d7wn+k+cXmviN5ssf8gA219w6U/NLlv3oo8/3VOjQnIX+X4Ee/9n5XP21 ntEj9M1d/gnOnlzmWZPO =XrtS -----END PGP SIGNATURE----- --SaC5xLQHNgl5EqhxTfL7Djtbcsh5j0Bgn--