[PATCH] X.509: Fix the time validation

2015-11-11 Thread David Howells
This fixes CVE-2015-5327. It affects kernels from 4.3-rc1 onwards. Fix the X.509 time validation to use month number-1 when looking up the number of days in that month. Also put the month number validation before doing the lookup so as not to risk overrunning the array. This can be tested by

Re: [tpmdd-devel] [GIT PULL] TPM fixes for v4.4

2015-11-11 Thread Peter Huewe
Hi James > Here are all critical fixes for the v4.4 changes. I've tried to be > conservative. Hope I don't screw this one :) > > BR, > /Jarkko > > The following changes since commit ba94c3ff20c9c179f2a80f0e4c71e1571ebbf5c7: > > Merge tag 'keys-next-20151021' of >