linux-kernel - Linux 2.6.17.10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060822192727.GA8579@kroah.com>
Date:	Tue, 22 Aug 2006 12:27:28 -0700
From:	Greg KH <gregkh@...e.de>
To:	linux-kernel@...r.kernel.org
Cc:	Andrew Morton <akpm@...l.org>, torvalds@...l.org, stable@...nel.org
Subject: Linux 2.6.17.10

We (the -stable team) are announcing the release of the 2.6.17.10 kernel.

It contains three security fixes: one for SCTP, one for UDF filesystems,
and one that only can be triggered by a local root user.

I'll also be replying to this message with a copy of the patch between
2.6.17.9 and 2.6.17.10, as it is small enough to do so.

The updated 2.6.17.y git tree can be found at:
 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.17.y.git
and can be browsed at the normal kernel.org git web browser:
	www.kernel.org/git/

thanks,

greg k-h

--------

 Makefile                 |    2 -
 block/elevator.c         |    3 +-
 fs/udf/super.c           |    2 -
 fs/udf/truncate.c        |   64 ++++++++++++++++++++++++++++-------------------
 include/net/sctp/sctp.h  |   13 ---------
 include/net/sctp/sm.h    |    3 --
 net/sctp/sm_make_chunk.c |   30 ++++++----------------
 net/sctp/sm_statefuns.c  |   20 ++------------
 net/sctp/socket.c        |   10 ++++++-
 9 files changed, 66 insertions(+), 81 deletions(-)

Summary of changes from v2.6.17.9 to v2.6.17.10
===============================================

Greg Kroah-Hartman:
      Linux 2.6.17.10

Jan Kara:
      Fix possible UDF deadlock and memory corruption (CVE-2006-4145)

Oleg Nesterov:
      elv_unregister: fix possible crash on module unload

Sridhar Samudrala:
      Fix sctp privilege elevation (CVE-2006-3745)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/