[{"id":1766232,"web_url":"http://patchwork.ozlabs.org/comment/1766232/","msgid":"<9808f3f6-e3f2-28cd-1f26-cf947d500aa3@canonical.com>","list_archive_url":null,"date":"2017-09-11T11:26:05","subject":"ACK: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","submitter":{"id":2898,"url":"http://patchwork.ozlabs.org/api/people/2898/","name":"Stefan Bader","email":"stefan.bader@canonical.com"},"content":"On 06.09.2017 14:02, Kleber Sacilotto de Souza wrote:\n> From: Michal Kubeček <mkubecek@suse.cz>\n> \n> Qian Zhang (张谦) reported a potential socket buffer overflow in\n> tipc_msg_build() which is also known as CVE-2016-8632: due to\n> insufficient checks, a buffer overflow can occur if MTU is too short for\n> even tipc headers. As anyone can set device MTU in a user/net namespace,\n> this issue can be abused by a regular user.\n> \n> As agreed in the discussion on Ben Hutchings' original patch, we should\n> check the MTU at the moment a bearer is attached rather than for each\n> processed packet. We also need to repeat the check when bearer MTU is\n> adjusted to new device MTU. UDP case also needs a check to avoid\n> overflow when calculating bearer MTU.\n> \n> Fixes: b97bf3fd8f6a (\"[TIPC] Initial merge\")\n> Signed-off-by: Michal Kubecek <mkubecek@suse.cz>\n> Reported-by: Qian Zhang (张谦) <zhangqian-c@360.cn>\n> Acked-by: Ying Xue <ying.xue@windriver.com>\n> Signed-off-by: David S. Miller <davem@davemloft.net>\n> \n> CVE-2016-8632\n> (backported from commit 3de81b758853f0b29c61e246679d20b513c4cfec)\n> [kleber:\n>  - Adjust context\n>  - Duplicate macro definitions in bearer.h to avoid mutual inclusion\n>  - Duplicate bearer changes for eth and ib media\n>  - Drop changes in udp_media.c]\n> Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>\nAcked-by: Stefan Bader <stefan.bader@canonical.com>\n\n> ---\n\nTested and looks sensible with explanation\n>  net/tipc/bearer.h    | 16 ++++++++++++++++\n>  net/tipc/eth_media.c | 11 +++++++++--\n>  net/tipc/ib_media.c  | 11 +++++++++--\n>  3 files changed, 34 insertions(+), 4 deletions(-)\n> \n> diff --git a/net/tipc/bearer.h b/net/tipc/bearer.h\n> index e5e04be6fffa..cc8bc3b7cb6f 100644\n> --- a/net/tipc/bearer.h\n> +++ b/net/tipc/bearer.h\n> @@ -58,6 +58,13 @@\n>  #define TIPC_MEDIA_TYPE_ETH\t1\n>  #define TIPC_MEDIA_TYPE_IB\t2\n>  \n> +/* Message header sizes from msg.h - duplicated to avoid mutual inclusion */\n> +#define INT_H_SIZE                40\n> +#define MAX_H_SIZE                60\n> +\n> +/* minimum bearer MTU */\n> +#define TIPC_MIN_BEARER_MTU\t(MAX_H_SIZE + INT_H_SIZE)\n> +\n>  /**\n>   * struct tipc_media_addr - destination address used by TIPC bearers\n>   * @value: address info (format defined by media)\n> @@ -210,4 +217,13 @@ static inline void tipc_bearer_send(struct tipc_bearer *b, struct sk_buff *buf,\n>  \tb->media->send_msg(buf, b, dest);\n>  }\n>  \n> +/* check if device MTU is too low for tipc headers */\n> +static inline bool tipc_mtu_bad(struct net_device *dev, unsigned int reserve)\n> +{\n> +\tif (dev->mtu >= TIPC_MIN_BEARER_MTU + reserve)\n> +\t\treturn false;\n> +\tnetdev_warn(dev, \"MTU too low for tipc bearer\\n\");\n> +\treturn true;\n> +}\n> +\n>  #endif\t/* _TIPC_BEARER_H */\n> diff --git a/net/tipc/eth_media.c b/net/tipc/eth_media.c\n> index f80d59f5a161..3fe074af15ec 100644\n> --- a/net/tipc/eth_media.c\n> +++ b/net/tipc/eth_media.c\n> @@ -180,6 +180,10 @@ static int enable_media(struct tipc_bearer *tb_ptr)\n>  \tdev = dev_get_by_name(&init_net, driver_name);\n>  \tif (!dev)\n>  \t\treturn -ENODEV;\n> +\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\tdev_put(dev);\n> +\t\treturn -EINVAL;\n> +\t}\n>  \n>  \t/* Create Ethernet bearer for device */\n>  \teb_ptr->dev = dev;\n> @@ -258,8 +262,6 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \tif (!eb_ptr->bearer)\n>  \t\treturn NOTIFY_DONE;\t\t/* bearer had been disabled */\n>  \n> -\teb_ptr->bearer->mtu = dev->mtu;\n> -\n>  \tswitch (evt) {\n>  \tcase NETDEV_CHANGE:\n>  \t\tif (netif_carrier_ok(dev))\n> @@ -274,6 +276,11 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \t\ttipc_block_bearer(eb_ptr->bearer);\n>  \t\tbreak;\n>  \tcase NETDEV_CHANGEMTU:\n> +\t\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\t\ttipc_disable_bearer(eb_ptr->bearer->name);\n> +\t\t\tbreak;\n> +\t\t}\n> +\t\teb_ptr->bearer->mtu = dev->mtu;\n>  \tcase NETDEV_CHANGEADDR:\n>  \t\ttipc_block_bearer(eb_ptr->bearer);\n>  \t\ttipc_continue(eb_ptr->bearer);\n> diff --git a/net/tipc/ib_media.c b/net/tipc/ib_media.c\n> index c13989297464..c34380b9357c 100644\n> --- a/net/tipc/ib_media.c\n> +++ b/net/tipc/ib_media.c\n> @@ -173,6 +173,10 @@ static int enable_media(struct tipc_bearer *tb_ptr)\n>  \tdev = dev_get_by_name(&init_net, driver_name);\n>  \tif (!dev)\n>  \t\treturn -ENODEV;\n> +\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\tdev_put(dev);\n> +\t\treturn -EINVAL;\n> +\t}\n>  \n>  \t/* Create InfiniBand bearer for device */\n>  \tib_ptr->dev = dev;\n> @@ -251,8 +255,6 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \tif (!ib_ptr->bearer)\n>  \t\treturn NOTIFY_DONE;\t\t/* bearer had been disabled */\n>  \n> -\tib_ptr->bearer->mtu = dev->mtu;\n> -\n>  \tswitch (evt) {\n>  \tcase NETDEV_CHANGE:\n>  \t\tif (netif_carrier_ok(dev))\n> @@ -267,6 +269,11 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \t\ttipc_block_bearer(ib_ptr->bearer);\n>  \t\tbreak;\n>  \tcase NETDEV_CHANGEMTU:\n> +\t\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\t\ttipc_disable_bearer(ib_ptr->bearer->name);\n> +\t\t\tbreak;\n> +\t\t}\n> +\t\tib_ptr->bearer->mtu = dev->mtu;\n>  \tcase NETDEV_CHANGEADDR:\n>  \t\ttipc_block_bearer(ib_ptr->bearer);\n>  \t\ttipc_continue(ib_ptr->bearer);\n>","headers":{"Return-Path":"<kernel-team-bounces@lists.ubuntu.com>","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com\n\t(client-ip=91.189.94.19; helo=huckleberry.canonical.com;\n\tenvelope-from=kernel-team-bounces@lists.ubuntu.com;\n\treceiver=<UNKNOWN>)","Received":["from huckleberry.canonical.com (huckleberry.canonical.com\n\t[91.189.94.19])\n\tby ozlabs.org (Postfix) with ESMTP id 3xrQby2S9bz9sNV;\n\tMon, 11 Sep 2017 21:26:22 +1000 (AEST)","from localhost ([127.0.0.1] helo=huckleberry.canonical.com)\n\tby huckleberry.canonical.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1drMr0-00043w-Qg; Mon, 11 Sep 2017 11:26:14 +0000","from youngberry.canonical.com ([91.189.89.112])\n\tby huckleberry.canonical.com with esmtps\n\t(TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128)\n\t(Exim 4.86_2) (envelope-from <stefan.bader@canonical.com>)\n\tid 1drMqz-00043b-Kg\n\tfor kernel-team@lists.ubuntu.com; Mon, 11 Sep 2017 11:26:13 +0000","from 1.general.smb.uk.vpn ([10.172.193.28])\n\tby youngberry.canonical.com with esmtpsa\n\t(TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16)\n\t(Exim 4.76) (envelope-from <stefan.bader@canonical.com>)\n\tid 1drMqz-0002q8-Cs\n\tfor kernel-team@lists.ubuntu.com; Mon, 11 Sep 2017 11:26:13 +0000"],"Subject":"ACK: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","To":"kernel-team@lists.ubuntu.com","References":"<20170906120208.10561-1-kleber.souza@canonical.com>\n\t<20170906120208.10561-2-kleber.souza@canonical.com>","From":"Stefan Bader <stefan.bader@canonical.com>","Message-ID":"<9808f3f6-e3f2-28cd-1f26-cf947d500aa3@canonical.com>","Date":"Mon, 11 Sep 2017 13:26:05 +0200","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101\n\tThunderbird/52.2.1","MIME-Version":"1.0","In-Reply-To":"<20170906120208.10561-2-kleber.souza@canonical.com>","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions <kernel-team.lists.ubuntu.com>","List-Unsubscribe":"<https://lists.ubuntu.com/mailman/options/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>","List-Archive":"<https://lists.ubuntu.com/archives/kernel-team>","List-Post":"<mailto:kernel-team@lists.ubuntu.com>","List-Help":"<mailto:kernel-team-request@lists.ubuntu.com?subject=help>","List-Subscribe":"<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>","Content-Type":"multipart/mixed;\n\tboundary=\"===============5055600816215695130==\"","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>"}},{"id":1779640,"web_url":"http://patchwork.ozlabs.org/comment/1779640/","msgid":"<9ad3b226-f776-df35-76bc-3fb280f82317@canonical.com>","list_archive_url":null,"date":"2017-10-04T10:29:53","subject":"ACK: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","submitter":{"id":2900,"url":"http://patchwork.ozlabs.org/api/people/2900/","name":"Colin Ian King","email":"colin.king@canonical.com"},"content":"On 06/09/17 13:02, Kleber Sacilotto de Souza wrote:\n> From: Michal Kubeček <mkubecek@suse.cz>\n> \n> Qian Zhang (张谦) reported a potential socket buffer overflow in\n> tipc_msg_build() which is also known as CVE-2016-8632: due to\n> insufficient checks, a buffer overflow can occur if MTU is too short for\n> even tipc headers. As anyone can set device MTU in a user/net namespace,\n> this issue can be abused by a regular user.\n> \n> As agreed in the discussion on Ben Hutchings' original patch, we should\n> check the MTU at the moment a bearer is attached rather than for each\n> processed packet. We also need to repeat the check when bearer MTU is\n> adjusted to new device MTU. UDP case also needs a check to avoid\n> overflow when calculating bearer MTU.\n> \n> Fixes: b97bf3fd8f6a (\"[TIPC] Initial merge\")\n> Signed-off-by: Michal Kubecek <mkubecek@suse.cz>\n> Reported-by: Qian Zhang (张谦) <zhangqian-c@360.cn>\n> Acked-by: Ying Xue <ying.xue@windriver.com>\n> Signed-off-by: David S. Miller <davem@davemloft.net>\n> \n> CVE-2016-8632\n> (backported from commit 3de81b758853f0b29c61e246679d20b513c4cfec)\n> [kleber:\n>  - Adjust context\n>  - Duplicate macro definitions in bearer.h to avoid mutual inclusion\n>  - Duplicate bearer changes for eth and ib media\n>  - Drop changes in udp_media.c]\n> Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>\n> ---\n>  net/tipc/bearer.h    | 16 ++++++++++++++++\n>  net/tipc/eth_media.c | 11 +++++++++--\n>  net/tipc/ib_media.c  | 11 +++++++++--\n>  3 files changed, 34 insertions(+), 4 deletions(-)\n> \n> diff --git a/net/tipc/bearer.h b/net/tipc/bearer.h\n> index e5e04be6fffa..cc8bc3b7cb6f 100644\n> --- a/net/tipc/bearer.h\n> +++ b/net/tipc/bearer.h\n> @@ -58,6 +58,13 @@\n>  #define TIPC_MEDIA_TYPE_ETH\t1\n>  #define TIPC_MEDIA_TYPE_IB\t2\n>  \n> +/* Message header sizes from msg.h - duplicated to avoid mutual inclusion */\n> +#define INT_H_SIZE                40\n> +#define MAX_H_SIZE                60\n> +\n> +/* minimum bearer MTU */\n> +#define TIPC_MIN_BEARER_MTU\t(MAX_H_SIZE + INT_H_SIZE)\n> +\n>  /**\n>   * struct tipc_media_addr - destination address used by TIPC bearers\n>   * @value: address info (format defined by media)\n> @@ -210,4 +217,13 @@ static inline void tipc_bearer_send(struct tipc_bearer *b, struct sk_buff *buf,\n>  \tb->media->send_msg(buf, b, dest);\n>  }\n>  \n> +/* check if device MTU is too low for tipc headers */\n> +static inline bool tipc_mtu_bad(struct net_device *dev, unsigned int reserve)\n> +{\n> +\tif (dev->mtu >= TIPC_MIN_BEARER_MTU + reserve)\n> +\t\treturn false;\n> +\tnetdev_warn(dev, \"MTU too low for tipc bearer\\n\");\n> +\treturn true;\n> +}\n> +\n>  #endif\t/* _TIPC_BEARER_H */\n> diff --git a/net/tipc/eth_media.c b/net/tipc/eth_media.c\n> index f80d59f5a161..3fe074af15ec 100644\n> --- a/net/tipc/eth_media.c\n> +++ b/net/tipc/eth_media.c\n> @@ -180,6 +180,10 @@ static int enable_media(struct tipc_bearer *tb_ptr)\n>  \tdev = dev_get_by_name(&init_net, driver_name);\n>  \tif (!dev)\n>  \t\treturn -ENODEV;\n> +\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\tdev_put(dev);\n> +\t\treturn -EINVAL;\n> +\t}\n>  \n>  \t/* Create Ethernet bearer for device */\n>  \teb_ptr->dev = dev;\n> @@ -258,8 +262,6 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \tif (!eb_ptr->bearer)\n>  \t\treturn NOTIFY_DONE;\t\t/* bearer had been disabled */\n>  \n> -\teb_ptr->bearer->mtu = dev->mtu;\n> -\n>  \tswitch (evt) {\n>  \tcase NETDEV_CHANGE:\n>  \t\tif (netif_carrier_ok(dev))\n> @@ -274,6 +276,11 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \t\ttipc_block_bearer(eb_ptr->bearer);\n>  \t\tbreak;\n>  \tcase NETDEV_CHANGEMTU:\n> +\t\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\t\ttipc_disable_bearer(eb_ptr->bearer->name);\n> +\t\t\tbreak;\n> +\t\t}\n> +\t\teb_ptr->bearer->mtu = dev->mtu;\n>  \tcase NETDEV_CHANGEADDR:\n>  \t\ttipc_block_bearer(eb_ptr->bearer);\n>  \t\ttipc_continue(eb_ptr->bearer);\n> diff --git a/net/tipc/ib_media.c b/net/tipc/ib_media.c\n> index c13989297464..c34380b9357c 100644\n> --- a/net/tipc/ib_media.c\n> +++ b/net/tipc/ib_media.c\n> @@ -173,6 +173,10 @@ static int enable_media(struct tipc_bearer *tb_ptr)\n>  \tdev = dev_get_by_name(&init_net, driver_name);\n>  \tif (!dev)\n>  \t\treturn -ENODEV;\n> +\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\tdev_put(dev);\n> +\t\treturn -EINVAL;\n> +\t}\n>  \n>  \t/* Create InfiniBand bearer for device */\n>  \tib_ptr->dev = dev;\n> @@ -251,8 +255,6 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \tif (!ib_ptr->bearer)\n>  \t\treturn NOTIFY_DONE;\t\t/* bearer had been disabled */\n>  \n> -\tib_ptr->bearer->mtu = dev->mtu;\n> -\n>  \tswitch (evt) {\n>  \tcase NETDEV_CHANGE:\n>  \t\tif (netif_carrier_ok(dev))\n> @@ -267,6 +269,11 @@ static int recv_notification(struct notifier_block *nb, unsigned long evt,\n>  \t\ttipc_block_bearer(ib_ptr->bearer);\n>  \t\tbreak;\n>  \tcase NETDEV_CHANGEMTU:\n> +\t\tif (tipc_mtu_bad(dev, 0)) {\n> +\t\t\ttipc_disable_bearer(ib_ptr->bearer->name);\n> +\t\t\tbreak;\n> +\t\t}\n> +\t\tib_ptr->bearer->mtu = dev->mtu;\n>  \tcase NETDEV_CHANGEADDR:\n>  \t\ttipc_block_bearer(ib_ptr->bearer);\n>  \t\ttipc_continue(ib_ptr->bearer);\n> \nTesting looks good to me.\n\nAcked-by: Colin Ian King <colin.king@canonical.com>","headers":{"Return-Path":"<kernel-team-bounces@lists.ubuntu.com>","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com\n\t(client-ip=91.189.94.19; helo=huckleberry.canonical.com;\n\tenvelope-from=kernel-team-bounces@lists.ubuntu.com;\n\treceiver=<UNKNOWN>)","Received":["from huckleberry.canonical.com (huckleberry.canonical.com\n\t[91.189.94.19])\n\tby ozlabs.org (Postfix) with ESMTP id 3y6XGK2mVFz9t2c;\n\tWed,  4 Oct 2017 21:30:01 +1100 (AEDT)","from localhost ([127.0.0.1] helo=huckleberry.canonical.com)\n\tby huckleberry.canonical.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1dzgw8-0003dH-H5; Wed, 04 Oct 2017 10:29:56 +0000","from youngberry.canonical.com ([91.189.89.112])\n\tby huckleberry.canonical.com with esmtps\n\t(TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128)\n\t(Exim 4.86_2) (envelope-from <colin.king@canonical.com>)\n\tid 1dzgw6-0003cP-70\n\tfor kernel-team@lists.ubuntu.com; Wed, 04 Oct 2017 10:29:54 +0000","from 1.general.cking.uk.vpn ([10.172.193.212])\n\tby youngberry.canonical.com with esmtpsa\n\t(TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16)\n\t(Exim 4.76) (envelope-from <colin.king@canonical.com>)\n\tid 1dzgw5-0003KH-UN; Wed, 04 Oct 2017 10:29:54 +0000"],"Subject":"ACK: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","To":"kernel-team@lists.ubuntu.com","References":"<20170906120208.10561-1-kleber.souza@canonical.com>\n\t<20170906120208.10561-2-kleber.souza@canonical.com>","From":"Colin Ian King <colin.king@canonical.com>","Message-ID":"<9ad3b226-f776-df35-76bc-3fb280f82317@canonical.com>","Date":"Wed, 4 Oct 2017 11:29:53 +0100","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101\n\tThunderbird/45.8.0","MIME-Version":"1.0","In-Reply-To":"<20170906120208.10561-2-kleber.souza@canonical.com>","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions <kernel-team.lists.ubuntu.com>","List-Unsubscribe":"<https://lists.ubuntu.com/mailman/options/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>","List-Archive":"<https://lists.ubuntu.com/archives/kernel-team>","List-Post":"<mailto:kernel-team@lists.ubuntu.com>","List-Help":"<mailto:kernel-team-request@lists.ubuntu.com?subject=help>","List-Subscribe":"<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"base64","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>"}},{"id":1780948,"web_url":"http://patchwork.ozlabs.org/comment/1780948/","msgid":"<20171005193548.x7xjyy4jmdf2ywfc@calabresa>","list_archive_url":null,"date":"2017-10-05T19:35:49","subject":"APPLIED: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","submitter":{"id":70574,"url":"http://patchwork.ozlabs.org/api/people/70574/","name":"Thadeu Lima de Souza Cascardo","email":"cascardo@canonical.com"},"content":"Applied to trusty master-next branch.\n\nThanks.\nCascardo.","headers":{"Return-Path":"<kernel-team-bounces@lists.ubuntu.com>","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com\n\t(client-ip=91.189.94.19; helo=huckleberry.canonical.com;\n\tenvelope-from=kernel-team-bounces@lists.ubuntu.com;\n\treceiver=<UNKNOWN>)","Received":["from huckleberry.canonical.com (huckleberry.canonical.com\n\t[91.189.94.19])\n\tby ozlabs.org (Postfix) with ESMTP id 3y7NKv1JkMz9t63;\n\tFri,  6 Oct 2017 06:36:03 +1100 (AEDT)","from localhost ([127.0.0.1] helo=huckleberry.canonical.com)\n\tby huckleberry.canonical.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1e0Bw3-0007Ep-08; Thu, 05 Oct 2017 19:35:55 +0000","from youngberry.canonical.com ([91.189.89.112])\n\tby huckleberry.canonical.com with esmtps\n\t(TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128)\n\t(Exim 4.86_2) (envelope-from <cascardo@canonical.com>)\n\tid 1e0Bw1-0007EP-IZ\n\tfor kernel-team@lists.ubuntu.com; Thu, 05 Oct 2017 19:35:53 +0000","from 1.general.cascardo.us.vpn ([10.172.70.58] helo=calabresa)\n\tby youngberry.canonical.com with esmtpsa\n\t(TLS1.0:RSA_AES_256_CBC_SHA1:32)\n\t(Exim 4.76) (envelope-from <cascardo@canonical.com>)\n\tid 1e0Bw0-0007e5-TY; Thu, 05 Oct 2017 19:35:53 +0000"],"Date":"Thu, 5 Oct 2017 16:35:49 -0300","From":"Thadeu Lima de Souza Cascardo <cascardo@canonical.com>","To":"Kleber Sacilotto de Souza <kleber.souza@canonical.com>","Subject":"APPLIED: [Trusty SRU][CVE-2016-8632][PATCH 1/1] tipc: check minimum\n\tbearer MTU","Message-ID":"<20171005193548.x7xjyy4jmdf2ywfc@calabresa>","References":"<20170906120208.10561-1-kleber.souza@canonical.com>\n\t<20170906120208.10561-2-kleber.souza@canonical.com>","MIME-Version":"1.0","Content-Disposition":"inline","In-Reply-To":"<20170906120208.10561-2-kleber.souza@canonical.com>","User-Agent":"NeoMutt/20170113 (1.7.2)","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions <kernel-team.lists.ubuntu.com>","List-Unsubscribe":"<https://lists.ubuntu.com/mailman/options/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>","List-Archive":"<https://lists.ubuntu.com/archives/kernel-team>","List-Post":"<mailto:kernel-team@lists.ubuntu.com>","List-Help":"<mailto:kernel-team-request@lists.ubuntu.com?subject=help>","List-Subscribe":"<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n\t<mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>","Cc":"kernel-team@lists.ubuntu.com","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"base64","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>"}}]