[kernel] r5164 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Sun Jan  1 17:47:30 2006
New Revision: 5164

Added:
   patch-tracking/proc_memory_disclosure
Log:
new procfs security problem


Added: patch-tracking/proc_memory_disclosure
==============================================================================
--- (empty file)
+++ patch-tracking/proc_memory_disclosure	Sun Jan  1 17:47:30 2006
@@ -0,0 +1,19 @@
+Candidate: needed
+References: 
+ http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8b90db0df7187a01fb7177f1f812123138f562cf
+Description: 
+Notes: 
+ jmm> 2.4 not affected as proc_file_lseek() contains a check for this
+ jmm> if (offset>=0 && (unsigned long long)offset<=file->f_dentry->d_inode->i_sb->s_maxbytes) {
+Bugs: 
+upstream: pending (2.6.15)
+linux-2.6:
+2.6.8-sarge-security: 
+2.4.27-sarge-security: N/A
+2.6.8: 
+2.4.19-woody-security: N/A
+2.4.18-woody-security: N/A
+2.4.17-woody-security: N/A
+2.4.16-woody-security: N/A
+2.4.17-woody-security-hppa: N/A
+2.4.17-woody-security-ia64: N/A