[kernel-sec-discuss] r5222 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-04-25 10:37:29 +0000 (Tue, 25 Apr 2017)
New Revision: 5222

Added:
   active/CVE-2017-7477
Log:
new net issue


Added: active/CVE-2017-7477
===================================================================
--- active/CVE-2017-7477	                        (rev 0)
+++ active/CVE-2017-7477	2017-04-25 10:37:29 UTC (rev 5222)
@@ -0,0 +1,14 @@
+Description: net: Heap overflow in skb_to_sgvec in macsec.c
+References:
+ http://www.openwall.com/lists/oss-security/2017/04/25/4
+ https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee
+ https://bugzilla.redhat.com/show_bug.cgi?id=1445207
+Notes:
+Bugs:
+upstream: needed
+4.9-upstream-stable: needed
+3.16-upstream-stable: N/A  "Introduced in 4.6"
+3.2-upstream-stable: N/A "Introduced in 4.6"
+sid: needed
+3.16-jessie-security: N/A  "Introduced in 4.6"
+3.2-wheezy-security: N/A  "Introduced in 4.6"