Re: CVE-2016-10229: MSG_PEEK - URGENT patch needed

On Thu, 18 May 2017 18:19:57 +0200
Romain Rivière <[email protected]> wrote:

> Hi,
> 
> On 18/05/17 17:34, Ben Green wrote:
> > Does it patch from the 3.18.44 patch OK?
> 
> Yup. The 3.18.44 even applies to 3.18.52 with just a few offsets.

and patch-3.18.44-vs2.3.7.5.diff applies to 3.18.53 [1] too with no
'FAILED|fuzz' [2].

[1] which i see is finally available as a tarball/patch on kernel.org;
    i got it out of the linux-stable git repo when gkh first published
    it earlier this week

[2] except for patching the Makefile with its embedded incremented
    version number which always fails, of course

i've tested 3.18.53-vs2.3.7.5 and staged it and will reboot to it
later this week (though separate from the ubuntu kernel security
updates everywhere else; how far away are we from the "common man"
creating live kernel updates? ;).

corey
--
[email protected]

> Cheers
> -- 
> Romain