linux-kernel - Linux 2.6.16.58-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080106131619.GG2082@does.not.exist>
Date:	Sun, 6 Jan 2008 15:16:19 +0200
From:	Adrian Bunk <adrian.bunk@...ial.fi>
To:	linux-kernel@...r.kernel.org
Subject: Linux 2.6.16.58-rc1

Security fixes since 2.6.16.57:
- CVE-2007-2525: PPPOE: fix memory leak (local DoS)
- CVE-2007-3731: Handle bogus %cs selector in single-step instruction decoding
- CVE-2007-6417: tmpfs: restore missing clear_highpage


Location:
ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/

git tree:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git

RSS feed of the git tree:
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=rss


Changes since 2.6.16.57:

Adrian Bunk (2):
      ipv4/arp.c:arp_process(): remove bogus #ifdef mess
      Linux 2.6.16.58-rc1

Alan Cox (1):
      [SCSI] aacraid: fix security weakness

Ben Collins (1):
      [ATM]: Add CPPFLAGS to byteorder.h check

Charles Hardin (1):
      [PFKEY]: Sending an SADB_GET responds with an SADB_GET

Chas Williams (1):
      [ATM]: [he] initialize lock and tasklet earlier

Evgeniy Polyakov (1):
      [PKT_SCHED]: Fix OOPS when removing devices from a teql queuing discipline

Florian Zumbiehl (1):
      PPPOE: fix memory leak (local DoS) (CVE-2007-2525)

Hugh Dickins (1):
      tmpfs: restore missing clear_highpage (CVE-2007-6417)

Jean Delvare (2):
      hwmon/lm87: Disable VID when it should be
      hwmon/lm87: Fix a division by zero

Michal Schmidt (1):
      [PPP_MPPE]: Don't put InterimKey on the stack

Patrick McHardy (2):
      [INET_DIAG]: Fix oops in netlink_rcv_skb
      [NETLINK]: Fix unicast timeouts

Peter Zijlstra (1):
      i386: fixup TRACE_IRQ breakage

Radu Rendec (1):
      [PKT_SCHED] CLS_U32: Fix endianness problem with u32 classifier hash masks.

Roland McGrath (1):
      Handle bogus %cs selector in single-step instruction decoding (CVE-2007-3731)

YOSHIFUJI Hideaki (1):
      [IPV6]: Fix unbalanced socket reference with MSG_CONFIRM.


 Makefile                     |    2 +-
 arch/i386/kernel/entry.S     |    1 -
 arch/i386/kernel/ptrace.c    |   22 +++++++++++++++-------
 arch/i386/kernel/traps.c     |   10 ++++++----
 arch/x86_64/kernel/ptrace.c  |   23 ++++++++++++++++-------
 drivers/atm/Makefile         |    2 +-
 drivers/atm/he.c             |   10 +++++-----
 drivers/hwmon/lm87.c         |    4 ++--
 drivers/net/ppp_mppe.c       |   14 ++++++--------
 drivers/net/pppox.c          |    2 +-
 drivers/scsi/aacraid/linit.c |    4 ++--
 include/linux/netlink.h      |    2 +-
 ipc/mqueue.c                 |    6 ++++--
 mm/shmem.c                   |    5 +++--
 net/ipv4/arp.c               |   19 -------------------
 net/ipv4/inet_diag.c         |   10 +++++++++-
 net/ipv6/raw.c               |    2 +-
 net/key/af_key.c             |    2 +-
 net/netlink/af_netlink.c     |   10 +++++-----
 net/sched/cls_u32.c          |    4 ++--
 net/sched/sch_teql.c         |    3 +++
 21 files changed, 84 insertions(+), 73 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/