On 01/11/2017, 04:56 PM, Bronek Kozicki wrote: > On 11/01/2017 15:50, Jiri Slaby wrote: >> On 01/08/2017, 03:28 PM, Bronek Kozicki wrote: >>> Hello, >>> >>> any particular reason why this fix >>> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2 >>> >>> was missed from stable 4.8 line? Apparently the bug being fixed has its >>> own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919 >> >> The patch is marked as: >> Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3 >> domain") >> >> and that is only in 4.9. So there seems to be a little point backporting >> to older kernels. > > > it is water under the bridge now, but I started this thread because I > noticed that some distributions are adding this to their own 4.8 kernels Which actually makes sense now, given 5d41ce29e *was* backported to 4.8. -- js suse labs -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html