[kernel] r6529 - in dists/sid/linux-2.6/debian: patches patches/series

[Frederik Schüler]

Author: fs
Date: Fri May  5 07:03:41 2006
New Revision: 6529

Added:
   dists/sid/linux-2.6/debian/patches/2.6.16.14
   dists/sid/linux-2.6/debian/patches/series/13
Modified:
   dists/sid/linux-2.6/debian/changelog

Log:
Add stable release 2.6.16.14


Modified: dists/sid/linux-2.6/debian/changelog
==============================================================================
--- dists/sid/linux-2.6/debian/changelog	(original)
+++ dists/sid/linux-2.6/debian/changelog	Fri May  5 07:03:41 2006
@@ -1,3 +1,11 @@
+linux-2.6 (2.6.16-13) UNRELEASED; urgency=low
+
+  [ Frederik Schüler ]
+  * Add stable release 2.6.16.14:
+    - smbfs chroot issue (CVE-2006-1864)
+
+ -- Frederik Schüler <fs at debian.org>  Fri,  5 May 2006 08:54:42 +0200
+
 linux-2.6 (2.6.16-12) unstable; urgency=low
 
   [ Bastian Blank ]

Added: dists/sid/linux-2.6/debian/patches/2.6.16.14
==============================================================================
--- (empty file)
+++ dists/sid/linux-2.6/debian/patches/2.6.16.14	Fri May  5 07:03:41 2006
@@ -0,0 +1,16 @@
+diff --git a/fs/smbfs/dir.c b/fs/smbfs/dir.c
+index 0424d06..45862ec 100644
+--- a/fs/smbfs/dir.c
++++ b/fs/smbfs/dir.c
+@@ -434,6 +434,11 @@ smb_lookup(struct inode *dir, struct den
+ 	if (dentry->d_name.len > SMB_MAXNAMELEN)
+ 		goto out;
+ 
++	/* Do not allow lookup of names with backslashes in */
++	error = -EINVAL;
++	if (memchr(dentry->d_name.name, '\\', dentry->d_name.len))
++		goto out;
++
+ 	lock_kernel();
+ 	error = smb_proc_getattr(dentry, &finfo);
+ #ifdef SMBFS_PARANOIA

Added: dists/sid/linux-2.6/debian/patches/series/13
==============================================================================
--- (empty file)
+++ dists/sid/linux-2.6/debian/patches/series/13	Fri May  5 07:03:41 2006
@@ -0,0 +1 @@
++ 2.6.16.14