mbox series

[SRU,Trusty,0/2] Fix for CVE-2016-10208

Message ID 20180725180935.2503-1-kleber.souza@canonical.com
Headers show
Series Fix for CVE-2016-10208 | expand

Message

Kleber Sacilotto de Souza July 25, 2018, 6:09 p.m. UTC 
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-10208.html

First patch is a clean cherry pick of the backported version of the patch
from linux-stable, the second patch is a trivial backport of a follow-up
fix of the first one.

Eryu Guan (1):
  ext4: validate s_first_meta_bg at mount time

Theodore Ts'o (1):
  ext4: fix fencepost in s_first_meta_bg validation

 fs/ext4/super.c | 9 +++++++++
 1 file changed, 9 insertions(+)

Comments

Stefan Bader July 26, 2018, 12:48 p.m. UTC | #1 
On 25.07.2018 20:09, Kleber Sacilotto de Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-10208.html
> 
> First patch is a clean cherry pick of the backported version of the patch
> from linux-stable, the second patch is a trivial backport of a follow-up
> fix of the first one.
> 
> Eryu Guan (1):
>   ext4: validate s_first_meta_bg at mount time
> 
> Theodore Ts'o (1):
>   ext4: fix fencepost in s_first_meta_bg validation
> 
>  fs/ext4/super.c | 9 +++++++++
>  1 file changed, 9 insertions(+)
> 
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Khalid Elmously July 27, 2018, 6:42 a.m. UTC | #2 
On 2018-07-25 20:09:33 , Kleber Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-10208.html
> 
> First patch is a clean cherry pick of the backported version of the patch
> from linux-stable, the second patch is a trivial backport of a follow-up
> fix of the first one.
> 
> Eryu Guan (1):
>   ext4: validate s_first_meta_bg at mount time
> 
> Theodore Ts'o (1):
>   ext4: fix fencepost in s_first_meta_bg validation
> 
>  fs/ext4/super.c | 9 +++++++++
>  1 file changed, 9 insertions(+)
> 
Acked-by: Khalid Elmously <khalid.elmously@canonical.com>

Good catch finding that follow-up commit!
Kleber Sacilotto de Souza July 27, 2018, 1:45 p.m. UTC | #3 
On 07/25/18 20:09, Kleber Sacilotto de Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-10208.html
> 
> First patch is a clean cherry pick of the backported version of the patch
> from linux-stable, the second patch is a trivial backport of a follow-up
> fix of the first one.
> 
> Eryu Guan (1):
>   ext4: validate s_first_meta_bg at mount time
> 
> Theodore Ts'o (1):
>   ext4: fix fencepost in s_first_meta_bg validation
> 
>  fs/ext4/super.c | 9 +++++++++
>  1 file changed, 9 insertions(+)
> 

Applied to trusty/master-next branch.

Thanks,
Kleber