| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20071014174950.GG4211@stusta.de>
Date: Sun, 14 Oct 2007 19:49:50 +0200
From: Adrian Bunk <bunk@...nel.org>
To: linux-kernel@...r.kernel.org
Subject: Linux 2.6.16.55
Security fixes since 2.6.16.54:
- CVE-2005-0504: fix buffer overflow in the moxa driver
- CVE-2007-2453: random fixes
- CVE-2007-3104: store sysfs inode nrs in s_ino to avoid readdir oopses
- CVE-2007-3105: random: fix bound check ordering
- CVE-2007-3848: Reset current->pdeath_signal on SUID binary execution
- CVE-2007-4571: Convert snd-page-alloc proc file to use seq_file
- CVE-2007-4573: x86_64: Zero extend all registers after ptrace in 32bit entry path
Location:
ftp://ftp.kernel.org/pub/linux/kernel/v2.6/
git tree:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
RSS feed of the git tree:
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=rss
Changes since 2.6.16.54:
Adrian Bunk (10):
unexport ktime_get_real
unexport neigh_update_hhs
unexport cpufreq_parse_governor
unexport csr1212_release_keyval
sound/core/pcm_lib.c: don't export static functions
unexport ip_conntrack_{,un}register_notifier
snd_mem_proc_read(): convert to list_for_each_entry*
Linux 2.6.16.55-rc1
Revert "TCP: Fix TCP handling of SACK in bidirectional flows"
Linux 2.6.16.55
Andi Kleen (1):
x86_64: Zero extend all registers after ptrace in 32bit entry path (CVE-2007-4573)
Dann Frazier (1):
fix buffer overflow in the moxa driver (CVE-2005-0504)
Eric Sandeen (1):
sysfs: store sysfs inode nrs in s_ino to avoid readdir oopses (CVE-2007-3104)
Kumar Gala (1):
[POWERPC] Flush registers to proper task context
Marcel Holtmann (1):
Reset current->pdeath_signal on SUID binary execution (CVE-2007-3848)
Matt Mackall (3):
random: fix error in entropy extraction (CVE-2007-2453 1 of 2)
random: fix seeding with zero entropy (CVE-2007-2453 2 of 2)
random: fix bound check ordering (CVE-2007-3105)
Mikael Pettersson (1):
[SPARC]: fix sparc64 gcc 4.2 compile failure
Nick Bowler (1):
[IPSEC] AH4: Update IPv4 options handling to conform to RFC 4302.
Takashi Iwai (1):
Convert snd-page-alloc proc file to use seq_file (CVE-2007-4571)
Makefile | 2
arch/powerpc/kernel/process.c | 6 -
arch/x86_64/ia32/ia32entry.S | 18 +++-
arch/x86_64/kernel/ptrace.c | 4 -
drivers/char/moxa.c | 8 +-
drivers/char/random.c | 76 +++++++++++--------
drivers/cpufreq/cpufreq.c | 1
drivers/ieee1394/ieee1394_core.c | 1
fs/exec.c | 13 ++-
fs/sysfs/dir.c | 16 ++--
fs/sysfs/inode.c | 1
fs/sysfs/mount.c | 1
include/asm-sparc/mostek.h | 2
include/asm-sparc64/mostek.h | 2
include/linux/sysfs.h | 1
kernel/hrtimer.c | 2
net/core/neighbour.c | 1
net/ipv4/ah4.c | 2
net/ipv4/netfilter/ip_conntrack_standalone.c | 2
net/ipv4/tcp_input.c | 5 -
sound/core/memalloc.c | 72 ++++++++++--------
sound/core/pcm_lib.c | 4 -
22 files changed, 137 insertions(+), 103 deletions(-)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists