diff --git a/dtb-aarch64.changes b/dtb-aarch64.changes index aa99082f..add9e2e7 100644 --- a/dtb-aarch64.changes +++ b/dtb-aarch64.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/dtb-aarch64.spec b/dtb-aarch64.spec index 872ed5ac..5c27430b 100644 --- a/dtb-aarch64.spec +++ b/dtb-aarch64.spec @@ -23,7 +23,7 @@ Name: dtb-aarch64 Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/dtb-armv6l.changes b/dtb-armv6l.changes index aa99082f..add9e2e7 100644 --- a/dtb-armv6l.changes +++ b/dtb-armv6l.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/dtb-armv6l.spec b/dtb-armv6l.spec index 0b25b216..b9e95bd3 100644 --- a/dtb-armv6l.spec +++ b/dtb-armv6l.spec @@ -23,7 +23,7 @@ Name: dtb-armv6l Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/dtb-armv7l.changes b/dtb-armv7l.changes index aa99082f..add9e2e7 100644 --- a/dtb-armv7l.changes +++ b/dtb-armv7l.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/dtb-armv7l.spec b/dtb-armv7l.spec index b21c4078..a2822149 100644 --- a/dtb-armv7l.spec +++ b/dtb-armv7l.spec @@ -23,7 +23,7 @@ Name: dtb-armv7l Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-64kb.changes b/kernel-64kb.changes index aa99082f..add9e2e7 100644 --- a/kernel-64kb.changes +++ b/kernel-64kb.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-64kb.spec b/kernel-64kb.spec index 5b475c1c..0616d714 100644 --- a/kernel-64kb.spec +++ b/kernel-64kb.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-debug.changes b/kernel-debug.changes index aa99082f..add9e2e7 100644 --- a/kernel-debug.changes +++ b/kernel-debug.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-debug.spec b/kernel-debug.spec index 15ac0886..b606a315 100644 --- a/kernel-debug.spec +++ b/kernel-debug.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-default.changes b/kernel-default.changes index aa99082f..add9e2e7 100644 --- a/kernel-default.changes +++ b/kernel-default.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-default.spec b/kernel-default.spec index cc8d8529..289f2fc9 100644 --- a/kernel-default.spec +++ b/kernel-default.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-docs.changes b/kernel-docs.changes index aa99082f..add9e2e7 100644 --- a/kernel-docs.changes +++ b/kernel-docs.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-docs.spec b/kernel-docs.spec index 6a25295f..3cd290b0 100644 --- a/kernel-docs.spec +++ b/kernel-docs.spec @@ -35,7 +35,7 @@ License: GPL-2.0 Group: Documentation/Man Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-lpae.changes b/kernel-lpae.changes index aa99082f..add9e2e7 100644 --- a/kernel-lpae.changes +++ b/kernel-lpae.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-lpae.spec b/kernel-lpae.spec index b887dc4e..b50b3de2 100644 --- a/kernel-lpae.spec +++ b/kernel-lpae.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-obs-build.changes b/kernel-obs-build.changes index aa99082f..add9e2e7 100644 --- a/kernel-obs-build.changes +++ b/kernel-obs-build.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-obs-build.spec b/kernel-obs-build.spec index f132f4fb..31f80971 100644 --- a/kernel-obs-build.spec +++ b/kernel-obs-build.spec @@ -53,7 +53,7 @@ License: GPL-2.0 Group: SLES Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-obs-qa.changes b/kernel-obs-qa.changes index aa99082f..add9e2e7 100644 --- a/kernel-obs-qa.changes +++ b/kernel-obs-qa.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-obs-qa.spec b/kernel-obs-qa.spec index f208debc..675ac32e 100644 --- a/kernel-obs-qa.spec +++ b/kernel-obs-qa.spec @@ -38,7 +38,7 @@ License: GPL-2.0 Group: SLES Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-pae.changes b/kernel-pae.changes index aa99082f..add9e2e7 100644 --- a/kernel-pae.changes +++ b/kernel-pae.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-pae.spec b/kernel-pae.spec index aa578b9a..0456a17d 100644 --- a/kernel-pae.spec +++ b/kernel-pae.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-source.changes b/kernel-source.changes index aa99082f..add9e2e7 100644 --- a/kernel-source.changes +++ b/kernel-source.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-source.spec b/kernel-source.spec index 653c78be..61436471 100644 --- a/kernel-source.spec +++ b/kernel-source.spec @@ -32,7 +32,7 @@ License: GPL-2.0 Group: Development/Sources Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-syms.changes b/kernel-syms.changes index aa99082f..add9e2e7 100644 --- a/kernel-syms.changes +++ b/kernel-syms.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-syms.spec b/kernel-syms.spec index 95f736a2..d5da412c 100644 --- a/kernel-syms.spec +++ b/kernel-syms.spec @@ -27,7 +27,7 @@ Group: Development/Sources Version: 4.9.9 %if %using_buildservice %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-syzkaller.changes b/kernel-syzkaller.changes index aa99082f..add9e2e7 100644 --- a/kernel-syzkaller.changes +++ b/kernel-syzkaller.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-syzkaller.spec b/kernel-syzkaller.spec index 9ac8ad35..99c17668 100644 --- a/kernel-syzkaller.spec +++ b/kernel-syzkaller.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/kernel-vanilla.changes b/kernel-vanilla.changes index aa99082f..add9e2e7 100644 --- a/kernel-vanilla.changes +++ b/kernel-vanilla.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Feb 14 08:11:44 CET 2017 - mkubecek@suse.cz + +- ipv4: keep skb->dst around in presence of IP options + (CVE-2017-5970 bsc#1024938). +- commit fff3f63 + ------------------------------------------------------------------- Thu Feb 9 11:55:53 CET 2017 - jslaby@suse.cz diff --git a/kernel-vanilla.spec b/kernel-vanilla.spec index 533f98d0..01850fd9 100644 --- a/kernel-vanilla.spec +++ b/kernel-vanilla.spec @@ -60,7 +60,7 @@ License: GPL-2.0 Group: System/Kernel Version: 4.9.9 %if 0%{?is_kotd} -Release: .g6c5120c +Release: .gfff3f63 %else Release: 0 %endif diff --git a/patches.fixes.tar.bz2 b/patches.fixes.tar.bz2 index 9c09f605..e4f8c4b2 100644 --- a/patches.fixes.tar.bz2 +++ b/patches.fixes.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:79dd5e604b6cb30cfa81b97fc296e5bdf352391cc00af48c4abd4494602e765d -size 10406 +oid sha256:8d4ae2f43da480013eb8fb87eb138fa19b07c588fcd697d915750a341c8f9dd6 +size 10952 diff --git a/series.conf b/series.conf index 97bba86f..13d4b601 100644 --- a/series.conf +++ b/series.conf @@ -218,6 +218,7 @@ # Networking, IPv6 ######################################################## patches.fixes/ip6_gre-fix-ip6gre_err-invalid-reads.patch + patches.fixes/ipv4-keep-skb-dst-around-in-presence-of-IP-options.patch ######################################################## # Netfilter diff --git a/source-timestamp b/source-timestamp index e1ef1eea..37a3cbad 100644 --- a/source-timestamp +++ b/source-timestamp @@ -1,3 +1,3 @@ -2017-02-09 11:55:53 +0100 -GIT Revision: 6c5120caac312a1909e2347a00433920d10ebd9f +2017-02-14 08:11:44 +0100 +GIT Revision: fff3f63865338e2b311827f2f1a5015cb14e904b GIT Branch: stable