mbox series

[SRU,Mantic,0/1] CVE-2023-4244 followup

Message ID 20231027120614.1711295-1-cascardo@canonical.com
Headers show
Series CVE-2023-4244 followup | expand

Message

Thadeu Lima de Souza Cascardo Oct. 27, 2023, 12:06 p.m. UTC
[Impact]
When CVE-2023-4244 was triage, a number of followup fixes were identified,
and this one was missing on Mantic.

[Potential regression]
nftable users may regress.

Pablo Neira Ayuso (1):
  netfilter: nft_set_rbtree: skip sync GC for new elements in this
    transaction

 net/netfilter/nft_set_rbtree.c | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

Comments

Roxana Nicolescu Oct. 27, 2023, 12:34 p.m. UTC | #1
On 27/10/2023 14:06, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> When CVE-2023-4244 was triage, a number of followup fixes were identified,
> and this one was missing on Mantic.
>
> [Potential regression]
> nftable users may regress.
>
> Pablo Neira Ayuso (1):
>    netfilter: nft_set_rbtree: skip sync GC for new elements in this
>      transaction
>
>   net/netfilter/nft_set_rbtree.c | 8 ++++++--
>   1 file changed, 6 insertions(+), 2 deletions(-)
>
Acked-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
Stefan Bader Oct. 27, 2023, 12:48 p.m. UTC | #2
On 27.10.23 14:06, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> When CVE-2023-4244 was triage, a number of followup fixes were identified,
> and this one was missing on Mantic.
> 
> [Potential regression]
> nftable users may regress.
> 
> Pablo Neira Ayuso (1):
>    netfilter: nft_set_rbtree: skip sync GC for new elements in this
>      transaction
> 
>   net/netfilter/nft_set_rbtree.c | 8 ++++++--
>   1 file changed, 6 insertions(+), 2 deletions(-)
> 

Acked-by: Stefan Bader <stefan.bader@canonical.com>
Stefan Bader Oct. 27, 2023, 12:55 p.m. UTC | #3
On 27.10.23 14:06, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> When CVE-2023-4244 was triage, a number of followup fixes were identified,
> and this one was missing on Mantic.
> 
> [Potential regression]
> nftable users may regress.
> 
> Pablo Neira Ayuso (1):
>    netfilter: nft_set_rbtree: skip sync GC for new elements in this
>      transaction
> 
>   net/netfilter/nft_set_rbtree.c | 8 ++++++--
>   1 file changed, 6 insertions(+), 2 deletions(-)
> 

Applied to mantic:linux/master-next. Thanks.

-Stefan