[kernel] r12484 - in dists/etch-security/linux-2.6/debian: . patches/bugfix patches/series
Dann Frazier
dannf at alioth.debian.org
Sat Dec 6 17:38:37 UTC 2008
Author: dannf
Date: Sat Dec 6 17:38:36 2008
New Revision: 12484
Log:
* Fix DoS when calling svc_listen twice on the same socket while reading
/proc/net/atm/*vc:
- bugfix/atm-duplicate-listen-on-socket-corrupts-the-vcc-table.patch
See CVE-2008-5079
Added:
dists/etch-security/linux-2.6/debian/patches/bugfix/atm-duplicate-listen-on-socket-corrupts-the-vcc-table.patch (props changed)
- copied unchanged from r12483, /dists/sid/linux-2.6/debian/patches/bugfix/all/atm-duplicate-listen-on-socket-corrupts-the-vcc-table.patch
Modified:
dists/etch-security/linux-2.6/debian/changelog
dists/etch-security/linux-2.6/debian/patches/series/23etch1
Modified: dists/etch-security/linux-2.6/debian/changelog
==============================================================================
--- dists/etch-security/linux-2.6/debian/changelog (original)
+++ dists/etch-security/linux-2.6/debian/changelog Sat Dec 6 17:38:36 2008
@@ -40,8 +40,12 @@
* Make sendmsg() block during UNIX garbage collection:
- bugfix/net-unix-gc-fix-soft-lockups-oom-issues.patch
See CVE-2008-5300
+ * Fix DoS when calling svc_listen twice on the same socket while reading
+ /proc/net/atm/*vc:
+ - bugfix/atm-duplicate-listen-on-socket-corrupts-the-vcc-table.patch
+ See CVE-2008-5079
- -- dann frazier <dannf at debian.org> Fri, 05 Dec 2008 23:00:02 -0700
+ -- dann frazier <dannf at debian.org> Sat, 06 Dec 2008 10:29:25 -0700
linux-2.6 (2.6.18.dfsg.1-23) stable; urgency=high
Modified: dists/etch-security/linux-2.6/debian/patches/series/23etch1
==============================================================================
--- dists/etch-security/linux-2.6/debian/patches/series/23etch1 (original)
+++ dists/etch-security/linux-2.6/debian/patches/series/23etch1 Sat Dec 6 17:38:36 2008
@@ -13,3 +13,4 @@
+ bugfix/net-unix-fix-inflight-counting-bug-in-garbage-collector.patch
+ bugfix/net-fix-recursive-descent-in-__scm_destroy.patch
+ bugfix/net-unix-gc-fix-soft-lockups-oom-issues.patch
++ bugfix/atm-duplicate-listen-on-socket-corrupts-the-vcc-table.patch
More information about the Kernel-svn-changes
mailing list