[kernel-sec-discuss] r5009 - active

Ben Hutchings benh at moszumanska.debian.org
Fri Feb 24 02:48:38 UTC 2017


Author: benh
Date: 2017-02-24 02:48:38 +0000 (Fri, 24 Feb 2017)
New Revision: 5009

Modified:
   active/CVE-2016-10044
Log:
Add further notes for CVE-2016-10044

Modified: active/CVE-2016-10044
===================================================================
--- active/CVE-2016-10044	2017-02-24 01:53:32 UTC (rev 5008)
+++ active/CVE-2016-10044	2017-02-24 02:48:38 UTC (rev 5009)
@@ -6,6 +6,9 @@
  carnil> needs check.
  bwh> I think carnil pasted the wrong hash above.  Anyway, I wrote a test
  bwh> program and verified this does affect 3.2 and 3.16.
+ bwh> Dependencies for 3.16:
+ bwh> 90f8572b0f02 vfs: Commit to never having exectuables on proc and sysfs.
+ bwh> This may not be practical to fix for 3.2.
 Bugs:
 upstream: released (4.8-rc7) [22f6b4d34fcf039c63a94e7670e0da24f8575a5a]
 4.9-upstream-stable: N/A "Fixed before branch point"




More information about the kernel-sec-discuss mailing list