Hi,
Here is a new 2.4 hotfix. Nothing alarming, though.
I reverted the netlink socket hashing bug fix that I took from
Davem's tree and introduced in 2.4.31-hf1 because Marcelo informed
me that Davem says it's broken and a better fix is needed.
It was also a right moment to merge Julien Tinnes' NULL dereference
patches for serial drivers. Strictly speaking, those missing checks
do not seem immediately exploitable, but a more complete audit of the
callers would be necessary to prove that. And it is clearly possible
that external patches expect those functions to do the check themselves.
Older kernels 2.4.29 and 2.4.30 are still maintained because they're still
downloaded (for reference, 2.4.29-hf11=10%, 2.4.30-hf4=6%, 2.4.31-hf1=84%).
Please find the changelog appended to this mail. Incremental patches
and tarballs for 2.4.29-hf12, 2.4.30-hf5 and 2.4.31-hf2 are available
from the usual place :
http://linux.exosec.net/kernel/2.4-hf/
I've only built 2.4.31-hf2 with all modules enabled to ensure that patches
were correct. Grant Coady regularly builds, and runs recent updates and
reports results here :
http://scatter.mine.nu/linux-2.4-hotfix/
Regards,
Willy
---
Changelog From 2.4.31-hf1 to 2.4.31-hf2 (semi-automated)
---------------------------------------
'+' = added ; '-' = removed
- 2.4.31-sparc64-solaris-emu-check-cmsg-len-1 (David S. Miller)
David told Marcelo this patch was not correct and that a better fix will
follow later.
+ 2.4.31-null-deref-cyclades-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/cyclades.c
+ 2.4.31-null-deref-esp-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/esp.c
+ 2.4.31-null-deref-isicom-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/isicom.c
+ 2.4.31-null-deref-mxser-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/mxser.c
+ 2.4.31-null-deref-riscom8-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/riscom8.c
+ 2.4.31-null-deref-specialix-1 (Julien Tinnes)
Fix two potential NULL dereferences in drivers/char/specialix.c
---
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
| |
 |