Re: Including patch for CVE-2020-25705 into upcoming Core Update 153?

Hello,

Yes, we should add this patch to the currently open next branch.

Who will send a patch?

Best, -Michael

On 16 Nov 2020, at 16:10, Peter Müller peter.mueller@ipfire.org wrote:

Hello *,

since Core Update 153 is already scheduled to come with a new kernel, including this patch against CVE-2020-25705 (dubbed "SADDNS" at the time of writing) into it makes sense IMHO:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?i...

Further reading is available at, for example, ZDNet: https://www.zdnet.com/article/dns-cache-poisoning-poised-for-a-comeback-sad-...

Thanks, and best regards, Peter Müller