[kernel] r4955 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Fri Dec  2 14:28:01 2005
New Revision: 4955

Modified:
   patch-tracking/sdla_xfer-bounds-checking
Log:
update on xdla_xfer issue, CVE id requested


Modified: patch-tracking/sdla_xfer-bounds-checking
==============================================================================
--- patch-tracking/sdla_xfer-bounds-checking	(original)
+++ patch-tracking/sdla_xfer-bounds-checking	Fri Dec  2 14:28:01 2005
@@ -1,10 +1,17 @@
 Candidate: needed
 References: 
+ http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html
 Description: 
  [SECURITY] Fix sdla_xfer lack of bounds checking, reported by Coverity.
 Notes: 
+ jmm> The referenced patch was applied by Jeff Garzik on 2004-04-16,
+ jmm> 2.6.6 was released on 2004-05-09, so Sarge seems not affected, should
+ jmm> be double-checked against the source though, but my bandwidth is currently
+ jmm> too slim to download 2.6.8
+ jmm> I've requested a CVE assignment
+ 
 Bugs: 
-upstream: 
+upstream: released (2.4.29-rc2)
 2.6.14: 
 2.6.8-sarge-security: 
 2.4.27-sarge-security: released (2.4.27-8) [129_net_sdla_coverty.diff]