Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 19 Aug 2014 15:08:32 +0200
From: Marcus Meissner <>
	OSS Security List <>
Subject: incomplete fix for CVE-2014-4611: kernel: integer overflow in


Jan Beulich writes in our bug for CVE-2014-4611:

Jan Beulich <> changed:

           What    |Removed                     |Added
                 CC|                            |

--- Comment #12 from Jan Beulich <> 2014-08-15 21:42:33 UTC ---
Except that it has been determined quite some time ago that all three fixes
having gone in upstream so far don't really fix anything. I posted a patch that
I think actually addresses the issue (, but
till now no-one cared to comment on it, apply it, or point out what's still
wrong, despite the ping 3 weeks later ( It
was - instead of the insufficient Linux ones - in fact meanwhile applied to the
Xen clone of that code.

Perhaps the kernel folks want to look at it again if they missed it so far.

Ciao, Marcus

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.