diff options
author | Josh Boyer <jwboyer@fedoraproject.org> | 2014-12-15 14:26:22 -0500 |
---|---|---|
committer | Josh Boyer <jwboyer@fedoraproject.org> | 2014-12-15 14:26:29 -0500 |
commit | 32f1e15e155aa239cedc2fba1a319ed38b7674e5 (patch) | |
tree | 704879d6ef0865e8c64b8d31799c4a77f0958bbe /kernel.spec | |
parent | c1706593bc0d9e86e72df56af96bba44f452ceb0 (diff) | |
download | kernel-32f1e15e155aa239cedc2fba1a319ed38b7674e5.tar.gz kernel-32f1e15e155aa239cedc2fba1a319ed38b7674e5.tar.xz kernel-32f1e15e155aa239cedc2fba1a319ed38b7674e5.zip |
CVE-2014-8133 x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS (rhbz 1172797 1174374)
Diffstat (limited to 'kernel.spec')
-rw-r--r-- | kernel.spec | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/kernel.spec b/kernel.spec index 25e337239..215c64e2d 100644 --- a/kernel.spec +++ b/kernel.spec @@ -627,6 +627,9 @@ Patch26096: cfg80211-don-t-WARN-about-two-consecutive-Country-IE.patch Patch26098: move-d_rcu-from-overlapping-d_child-to-overlapping-d.patch Patch26099: deal-with-deadlock-in-d_walk.patch +#CVE-2014-8133 rhbz 1172797 1174374 +Patch26100: x86-tls-Validate-TLS-entries-to-protect-espfix.patch + # git clone ssh://git.fedorahosted.org/git/kernel-arm64.git, git diff master...devel Patch30000: kernel-arm64.patch @@ -1363,6 +1366,9 @@ ApplyPatch cfg80211-don-t-WARN-about-two-consecutive-Country-IE.patch ApplyPatch move-d_rcu-from-overlapping-d_child-to-overlapping-d.patch ApplyPatch deal-with-deadlock-in-d_walk.patch +#CVE-2014-8133 rhbz 1172797 1174374 +ApplyPatch x86-tls-Validate-TLS-entries-to-protect-espfix.patch + %if 0%{?aarch64patches} ApplyPatch kernel-arm64.patch %ifnarch aarch64 # this is stupid, but i want to notice before secondary koji does. @@ -2232,6 +2238,7 @@ fi # || || %changelog * Mon Dec 15 2014 Josh Boyer <jwboyer@fedoraproject.org> +- CVE-2014-8133 x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS (rhbz 1172797 1174374) - CVE-2014-8559 deadlock due to incorrect usage of rename_lock (rhbz 1159313 1173814) * Fri Dec 12 2014 Kyle McMartin <kyle@fedoraproject.org> |