[kernel] r6850 - in dists/trunk/linux-2.6/debian: . patches/series

[maximilian attems]

Author: maks-guest
Date: Tue Jun 20 17:41:19 2006
New Revision: 6850

Added:
   dists/trunk/linux-2.6/debian/patches/2.6.17.1
Modified:
   dists/trunk/linux-2.6/debian/changelog
   dists/trunk/linux-2.6/debian/patches/series/1

Log:
add 2.6.17.1


Modified: dists/trunk/linux-2.6/debian/changelog
==============================================================================
--- dists/trunk/linux-2.6/debian/changelog	(original)
+++ dists/trunk/linux-2.6/debian/changelog	Tue Jun 20 17:41:19 2006
@@ -30,7 +30,11 @@
   * [ia64] Update configs
   * [ia64] Use gcc 4.1.
 
- -- Bastian Blank <waldi at debian.org>  Tue, 20 Jun 2006 14:50:12 +0200
+  [ maximilian attems ]
+  * Add stable release 2.6.17.1:
+    - xt_sctp: fix endless loop caused by 0 chunk length (CVE-2006-3085)
+
+ -- maximilian attems <maks at sternwelten.at>  Tue, 20 Jun 2006 19:34:18 +0200
 
 linux-2.6 (2.6.16+2.6.17-rc3-0experimental.1) experimental; urgency=low
 

Added: dists/trunk/linux-2.6/debian/patches/2.6.17.1
==============================================================================
--- (empty file)
+++ dists/trunk/linux-2.6/debian/patches/2.6.17.1	Tue Jun 20 17:41:19 2006
@@ -0,0 +1,13 @@
+diff --git a/net/netfilter/xt_sctp.c b/net/netfilter/xt_sctp.c
+index 34bd872..c29692c 100644
+--- a/net/netfilter/xt_sctp.c
++++ b/net/netfilter/xt_sctp.c
+@@ -62,7 +62,7 @@ #endif
+ 
+ 	do {
+ 		sch = skb_header_pointer(skb, offset, sizeof(_sch), &_sch);
+-		if (sch == NULL) {
++		if (sch == NULL || sch->length == 0) {
+ 			duprintf("Dropping invalid SCTP packet.\n");
+ 			*hotdrop = 1;
+ 			return 0;

Modified: dists/trunk/linux-2.6/debian/patches/series/1
==============================================================================
--- dists/trunk/linux-2.6/debian/patches/series/1	(original)
+++ dists/trunk/linux-2.6/debian/patches/series/1	Tue Jun 20 17:41:19 2006
@@ -24,3 +24,4 @@
 + s390-drivers-ccw-uevent-cleanup.patch
 + mips-sb1-duart-tts.patch
 #FIXME + powerpc-mkvmlinuz-support-2.patch
++ 2.6.17.1