diff options
author | Sona Sarmadi <sona.sarmadi@enea.com> | 2016-08-22 14:24:20 +0200 |
---|---|---|
committer | Martin Borg <martin.borg@enea.com> | 2016-08-22 14:55:50 +0200 |
commit | 6d95f99420e5dc05fc7319b6e3e85eec29a3e080 (patch) | |
tree | f9cb4e60e1e6a5044c73ab025e3557b5539840ee /recipes-kernel/linux/linux-ls1_3.12.bbappend | |
parent | b065fdd08d51d4ed21fc641a2b97d42fccb5cb98 (diff) | |
download | meta-enea-bsp-arm-6d95f99420e5dc05fc7319b6e3e85eec29a3e080.tar.gz |
kernel-net: CVE-2016-5696
tcp: make challenge acks less predictable
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not
properly determine the rate of challenge ACK segments, which
makes it easier for man-in-the-middle attackers to hijack TCP
sessions via a blind in-window attack.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/
patch/?id=860c53258e634c54f70252c352bae7bac30724a9
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
Diffstat (limited to 'recipes-kernel/linux/linux-ls1_3.12.bbappend')
-rw-r--r-- | recipes-kernel/linux/linux-ls1_3.12.bbappend | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-ls1_3.12.bbappend b/recipes-kernel/linux/linux-ls1_3.12.bbappend index 0214dda..b04933d 100644 --- a/recipes-kernel/linux/linux-ls1_3.12.bbappend +++ b/recipes-kernel/linux/linux-ls1_3.12.bbappend | |||
@@ -6,6 +6,7 @@ SRC_URI += "file://ls1021aiot.dts \ | |||
6 | file://0001-fsnotify-fix-oops-in-fsnotify_clear_marks_by_group_f.patch \ | 6 | file://0001-fsnotify-fix-oops-in-fsnotify_clear_marks_by_group_f.patch \ |
7 | file://0002-watchdog-fix-errata-err004346.patch \ | 7 | file://0002-watchdog-fix-errata-err004346.patch \ |
8 | file://ppp-CVE-2015-8569.patch \ | 8 | file://ppp-CVE-2015-8569.patch \ |
9 | file://net-CVE-2016-5696.patch \ | ||
9 | " | 10 | " |
10 | 11 | ||
11 | # fix err: "linux-ls1-3.12-r0 do_deploy: Taskhash mismatch" | 12 | # fix err: "linux-ls1-3.12-r0 do_deploy: Taskhash mismatch" |