[kernel] r6438 - in dists/sid/linux-2.6/debian: . patches patches/series

[Bastian Blank]

Author: waldi
Date: Mon Apr 17 23:47:20 2006
New Revision: 6438

Added:
   dists/sid/linux-2.6/debian/patches/2.6.16.7   (contents, props changed)
Modified:
   dists/sid/linux-2.6/debian/changelog
   dists/sid/linux-2.6/debian/patches/series/8
Log:
Add stable release 2.6.16.7.

* debian/changelog: Update.
* debian/patches/series/8: Enable 2.6.16.7.
* debian/patches/2.6.16.7: Add.


Modified: dists/sid/linux-2.6/debian/changelog
==============================================================================
--- dists/sid/linux-2.6/debian/changelog	(original)
+++ dists/sid/linux-2.6/debian/changelog	Mon Apr 17 23:47:20 2006
@@ -25,8 +25,10 @@
     - powerpc: iSeries needs slb_initialize to be called
     - Fix block device symlink name
     - Incorrect signature sent on SMB Read
+  * Add stable release 2.6.16.7:
+    - fix MADV_REMOVE vulnerability (CVE-2006-1524 for real this time)
 
- -- Bastian Blank <waldi at debian.org>  Mon, 17 Apr 2006 23:22:20 +0200
+ -- Bastian Blank <waldi at debian.org>  Tue, 18 Apr 2006 01:41:24 +0200
 
 linux-2.6 (2.6.16-7) unstable; urgency=low
 

Added: dists/sid/linux-2.6/debian/patches/2.6.16.7
==============================================================================
--- (empty file)
+++ dists/sid/linux-2.6/debian/patches/2.6.16.7	Mon Apr 17 23:47:20 2006
@@ -0,0 +1,14 @@
+diff --git a/mm/madvise.c b/mm/madvise.c
+index af3d573..4e19615 100644
+--- a/mm/madvise.c
++++ b/mm/madvise.c
+@@ -168,6 +168,9 @@ static long madvise_remove(struct vm_are
+ 			return -EINVAL;
+ 	}
+ 
++	if ((vma->vm_flags & (VM_SHARED|VM_WRITE)) != (VM_SHARED|VM_WRITE))
++		return -EACCES;
++
+ 	mapping = vma->vm_file->f_mapping;
+ 
+ 	offset = (loff_t)(start - vma->vm_start)

Modified: dists/sid/linux-2.6/debian/patches/series/8
==============================================================================
--- dists/sid/linux-2.6/debian/patches/series/8	(original)
+++ dists/sid/linux-2.6/debian/patches/series/8	Mon Apr 17 23:47:20 2006
@@ -1,2 +1,3 @@
 + include-linux-seccomp-abifix.patch
 + 2.6.16.6
++ 2.6.16.7