[kernel] r13413 - in dists/etch-security/linux-2.6/debian: . patches/bugfix/all patches/series

[Dann Frazier]

Author: dannf
Date: Mon Apr 13 01:26:46 2009
New Revision: 13413

Log:
See CVE-2009-0859  * 
* copy_process: fix CLONE_PARENT && parent_exec_id interaction
   - bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch
  See CVE-2009-0028

Added:
   dists/etch-security/linux-2.6/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch
      - copied, changed from r13406, dists/etch-security/linux-2.6.24/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch
Modified:
   dists/etch-security/linux-2.6/debian/changelog
   dists/etch-security/linux-2.6/debian/patches/series/24etch1

Modified: dists/etch-security/linux-2.6/debian/changelog
==============================================================================
--- dists/etch-security/linux-2.6/debian/changelog	Mon Apr 13 01:23:41 2009	(r13412)
+++ dists/etch-security/linux-2.6/debian/changelog	Mon Apr 13 01:26:46 2009	(r13413)
@@ -40,7 +40,11 @@
   * shm: fix shmctl(SHM_INFO) lockup with !CONFIG_SHMEM
     This issue does not effect pre-build Debian kernels.
      - bugfix/all/shm-fix-shmctl-SHM_INFO-lockup-without-CONFIG_SHMEM.patch
-    See CVE-2009-0859
+    See CVE-2009-0859  * 
+  * copy_process: fix CLONE_PARENT && parent_exec_id interaction
+     - bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch
+    See CVE-2009-0028
+
  -- dann frazier <dannf at debian.org>  Tue, 24 Feb 2009 23:49:22 -0700
 
 linux-2.6 (2.6.18.dfsg.1-24) stable; urgency=high

Copied and modified: dists/etch-security/linux-2.6/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch (from r13406, dists/etch-security/linux-2.6.24/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch)
==============================================================================
--- dists/etch-security/linux-2.6.24/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch	Sun Apr 12 22:42:16 2009	(r13406, copy source)
+++ dists/etch-security/linux-2.6/debian/patches/bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch	Mon Apr 13 01:26:46 2009	(r13413)
@@ -19,23 +19,24 @@
     Cc: Serge E. Hallyn <serge at hallyn.com>
     Signed-off-by: Linus Torvalds <torvalds at linux-foundation.org>
 
-Adjusted to apply to Debian's 2.6.24 by dann frazier <dannf at debian.org>
+Adjusted to apply to Debian's 2.6.18 by dann frazier <dannf at debian.org>
 
 diff -urpN a/kernel/fork.c b/kernel/fork.c
---- a/kernel/fork.c	2009-04-05 19:32:23.000000000 -0600
-+++ b/kernel/fork.c	2009-04-05 21:46:39.000000000 -0600
-@@ -1197,10 +1197,6 @@ static struct task_struct *copy_process(
+--- a/kernel/fork.c	2009-04-12 18:39:00.000000000 -0600
++++ b/kernel/fork.c	2009-04-12 19:22:00.000000000 -0600
+@@ -1137,11 +1137,6 @@ static struct task_struct *copy_process(
  	clear_tsk_thread_flag(p, TIF_SYSCALL_EMU);
  #endif
  
 -	/* Our parent execution domain becomes current domain
 -	   These must match for thread signalling to apply */
+-	   
 -	p->parent_exec_id = p->self_exec_id;
 -
  	/* ok, now we should be set up.. */
  	p->exit_signal = (clone_flags & CLONE_THREAD) ? -1 : (clone_flags & CSIGNAL);
  	p->pdeath_signal = 0;
-@@ -1242,10 +1238,13 @@ static struct task_struct *copy_process(
+@@ -1177,10 +1172,13 @@ static struct task_struct *copy_process(
  		set_task_cpu(p, smp_processor_id());
  
  	/* CLONE_PARENT re-uses the old parent */

Modified: dists/etch-security/linux-2.6/debian/patches/series/24etch1
==============================================================================
--- dists/etch-security/linux-2.6/debian/patches/series/24etch1	Mon Apr 13 01:23:41 2009	(r13412)
+++ dists/etch-security/linux-2.6/debian/patches/series/24etch1	Mon Apr 13 01:26:46 2009	(r13413)
@@ -73,3 +73,4 @@
 + bugfix/all/skfp-fix-inverted-cap-logic.patch
 + bugfix/syscall-audit-fix-32+64-syscall-hole.patch
 + bugfix/all/shm-fix-shmctl-SHM_INFO-lockup-without-CONFIG_SHMEM.patch
++ bugfix/all/copy_process-fix-CLONE_PARENT-and-parent_exec_id-interaction.patch