Re: Stable update request: kernel changes to fix PIE with large stack

On Thu, 2017-03-23 at 21:27 +0000, Ben Hutchings wrote:
> On Thu, 2017-03-23 at 17:06 +0000, James Cowgill wrote:
[...]
> > I believe any of the following will fix this (but have not all been tested):
> > - Reduce the stack usage in xsltproc (the upstream bug)
> > - Upgrade the relevant buildds to Linux >= 4.1
> > - Apply d1fd836dcf00 to jessie's kernel
> 
> That's part of a series of 10 commits covering multiple architectures. 
> I already picked one of them as a dependency for fixing CVE-2016-3672,
> which leaves 9 to do.  I think it is worth doing this in stable to
> support chroots and partial upgrades, but I would like to hear the
> release team ack/nak this in principle before I start preparing the
> change for Debian stable.
> 
> Kees Cook quotes the list of commits here:
> http://lists.openwall.net/linux-kernel/2015/07/27/964
> (I can't find the original message).
[...]

The kernel bug report for this is #797530.

Ben.

-- 
Ben Hutchings
Everything should be made as simple as possible, but not simpler.
                                                           - Albert
Einstein

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAljcNqIACgkQ57/I7JWG
EQk/2BAAwhwWxGncHAlKJPLOolLOqMv1mfgRc3zt+r6hkIS1DKGndOcY4BkYs7ea
M3Kr5+JEakvWXtKUieD5kN8Uu6ZX3PpcwX/tv//ZEY+KpiqHcoyWWz+Ovyu8KrRw
emEaGd60HoU/MaeTM6CdCS2VKrb32au6K1y54ybMHRKQNuvpDvAEjKtoWd7fat/H
b241WhRyYGmZFWjnbrp20mNiVv8yy7k+eHCqEfXuzxfC3OyGktrTVre02c2Q345W
YS+3DYTTHCf8DeY4ITXwoM6q7gd0O/91KEAkPv1ak2AtPSiYjy7IKnUMXEDvX3FO
IFsvXOU536SVY7d11ZlU5uf08ag/Q1N2FqovJvlW2kCUSSOV3mY9M0VVC6CO//AM
mpWP/8VDMPylGqn4nin831nGgkneg3erSJvFAFMYqT5g9xpcPeSL+M/mRLXkQmP+
UYjotOPrVUT4Wme+hmyJeBlw19G2Pij+G5g9kH3fTsdmmeY94ueEZPi34GROhl4p
ISXJ1iSGgjMlzmuDXZ5jTvK4UMuEH8lHZC9CFg3j+lHSR6o8UKFOrlU2HUGuvv86
zEEgMIvcH0gmKaHStHZl/nZxBw0bYSVs+0gRjRaOU0hs7RRqRuc2LMBo90g2uV+8
Cqa4tHB7aP+UWWtenx0xlIaDeWXAw1u7g3m/UU09hEnkZNauDVc=
=gJum
-----END PGP SIGNATURE-----