[Acked] [Precise][CVE-2013-7421][CVE-2014-9644][PATCH 0/3] crypto: prefix module autoloading with "crypto-"

Andy Whitcroft apw at canonical.com
Mon Feb 9 09:47:48 UTC 2015


On Tue, Feb 03, 2015 at 11:18:22AM +0000, Luis Henriques wrote:
> Following this email, I'm sending the fixes for CVE-2013-7421 and
> CVE-2014-9644.  The patches touch a lot of files, and the backports
> are mainly dropping changes to crypto modules that are not available
> in the 3.2 kernel.
> 
> I've also checked the Debian backports and picked some extra changes
> to algorithms that had been renamed/moved in more recent kernels.
> 
> Kees Cook (2):
>   crypto: prefix module autoloading with "crypto-"
>   crypto: include crypto- module prefix in template
> 
> Mathias Krause (1):
>   crypto: add missing crypto module aliases
[...]
>  76 files changed, 137 insertions(+), 67 deletions(-)

Hard to be sure this covers all the bases, but it seems to do what is
claimed en-toto.  Although it is wide ranging it is performing a single
conversion in each case and appears sane.  It should appear quickly in
testing if any signficant conversions are missing.

Acked-by: Andy Whitcroft <apw at canonical.com>

-apw




More information about the kernel-team mailing list