mbox series

[SRU,Trusty,Artful,0/1] Fix for CVE-2017-17807

Message ID 20180201180958.10831-1-kleber.souza@canonical.com
Headers show
Series Fix for CVE-2017-17807 | expand

Message

Kleber Sacilotto de Souza Feb. 1, 2018, 6:09 p.m. UTC 
https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17807.html

Clean cherry pick for Artful, backported for Trusty, fix for Xenial is queued
as part of stable update to 4.4.107.

Eric Biggers (1):
  KEYS: add missing permission check for request_key() destination

 security/keys/request_key.c | 48 +++++++++++++++++++++++++++++++++++----------
 1 file changed, 38 insertions(+), 10 deletions(-)

Comments

Khalid Elmously Feb. 9, 2018, 3:22 p.m. UTC | #1 
On 2018-02-01 19:09:56 , Kleber Sacilotto de Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17807.html
> 
> Clean cherry pick for Artful, backported for Trusty, fix for Xenial is queued
> as part of stable update to 4.4.107.
> 
> Eric Biggers (1):
>   KEYS: add missing permission check for request_key() destination
> 
>  security/keys/request_key.c | 48 +++++++++++++++++++++++++++++++++++----------
>  1 file changed, 38 insertions(+), 10 deletions(-)
> 

Acked-by: Khalid Elmously <khalid.elmously@canonical.com>
Stefan Bader Feb. 28, 2018, 10 a.m. UTC | #2 
On 01.02.2018 19:09, Kleber Sacilotto de Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17807.html
> 
> Clean cherry pick for Artful, backported for Trusty, fix for Xenial is queued
> as part of stable update to 4.4.107.
> 
> Eric Biggers (1):
>   KEYS: add missing permission check for request_key() destination
> 
>  security/keys/request_key.c | 48 +++++++++++++++++++++++++++++++++++----------
>  1 file changed, 38 insertions(+), 10 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Kleber Sacilotto de Souza March 1, 2018, 2:16 p.m. UTC | #3 
On 02/01/18 19:09, Kleber Sacilotto de Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17807.html
> 
> Clean cherry pick for Artful, backported for Trusty, fix for Xenial is queued
> as part of stable update to 4.4.107.
> 
> Eric Biggers (1):
>   KEYS: add missing permission check for request_key() destination
> 
>  security/keys/request_key.c | 48 +++++++++++++++++++++++++++++++++++----------
>  1 file changed, 38 insertions(+), 10 deletions(-)
> 

Applied to trusty/master-next-backlog and artful/master-next-backlog
branches.

Thanks,
Kleber