[APPLIED] [lucid/fsl-imx51] [pull request] First round of CVE fixes

Andy Whitcroft apw at canonical.com
Wed Jun 1 11:30:46 UTC 2011


On Wed, Jun 01, 2011 at 12:23:54PM +0200, Paolo Pisati wrote:

> (sort-of) top down list of CVE closed in this pull:
> 
> CVE-2010-3876, CVE-2010-4157, CVE-2010-4080, CVE-2010-4081,
> CVE-2010-4082, CVE-2010-4083, CVE-2011-1494, CVE-2011-1182,
> CVE-2010-3875, CVE-2010-4655, CVE-2010-3877, CVE-2010-3865,
> CVE-2010-3859, CVE-2011-1593, CVE-2010-3880, CVE-2010-4248,
> CVE-2010-4243, CVE-2010-3874, CVE-2011-1748, CVE-2011-1017,
> CVE-2010-3875, CVE-1011-2022, CVE-2011-1747, CVE-2010-3873
> 
> this one is not a CVE fix:
> 
> John Hughes (1):
> x25: Patch to fix bug 15678 - x25 accesses fields beyond end of packet.
> 
> but is needed for:
> 
> andrew hendry (1):
>       memory corruption in X.25 facilities parsing
> 
> All the commits where cherry-picked from lucid, have the upstream sha,
> contain the buglink and were previously acked by some of the kteam.
> 
> The release is still open since i'm going to push CVE fixes till the
> next kernel cut.

I have reviewed all of these patches, they all (but two) seem identicle to
the upstream commits, the others seem identicle to that applied to Lucid.
Therefore:

Acked-by: Andy Whitcroft <apw at canonical.com>

The component patches here were all already reviewed and have been
Acked-by: by team members already.  In the main they are already released
into the main Distro kernel, have been tested by QA, and pushed out into
-updates.  Therefore I believe this lot is ready for application.

Applied to Lucid fsl-imx51.

-apw




More information about the kernel-team mailing list