lkml.org 
[lkml]   [2007]   [Jun]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectLinux 2.6.21.4
We (the -stable team) are announcing the release of the 2.6.21.4 kernel.
This release has three security fixes in it:

374f167d: random: fix error in entropy extraction (CVE-2007-2453 1 of 2)
7bd369b1: random: fix seeding with zero entropy (CVE-2007-2453 2 of 2)
c23e7e4c: cpuset: prevent information leak in cpuset_tasks_read (CVE-2007-2875)
8c640bd0: NETFILTER: {ip, nf}_conntrack_sctp: fix remotely triggerable NULL ptr dereference (CVE-2007-2876)

The /dev/[u]random fix is especially important for machines with no
entropy source (e.g. keyboard, mice, or disk drives) and no realtime clock
since successive boots could generate same output from RNG. The cpuset
bug is a possible information leak when reading from /dev/cpuset/tasks
(assuming cpusets support is compiled in and the cpuset fs mounted
on /dev/cpuset). The SCTP bug is remotely triggerable when using SCTP
conntrack.


I'll also be replying to this message with a copy of the patch between
2.6.21.3 and 2.6.21.4

The updated 2.6.21.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.21.y.git
and can be browsed at the normal kernel.org git web browser:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.21.y.git;a=summary

thanks,
-chris

---------

Makefile | 2
drivers/char/random.c | 67 +++++++++++++++------------
kernel/cpuset.c | 7 --
net/ipv4/netfilter/ip_conntrack_proto_sctp.c | 3 -
net/netfilter/nf_conntrack_proto_sctp.c | 3 -
5 files changed, 44 insertions(+), 38 deletions(-)

Summary of changes from v2.6.21.3 to v2.6.21.4
==============================================

Chris Wright (2):
cpuset: prevent information leak in cpuset_tasks_read (CVE-2007-2875)
Linux 2.6.21.4

Matt Mackall (2):
random: fix error in entropy extraction (CVE-2007-2453 1 of 2)
random: fix seeding with zero entropy (CVE-2007-2453 2 of 2)

Patrick McHardy (1):
NETFILTER: {ip, nf}_conntrack_sctp: fix remotely triggerable NULL ptr dereference (CVE-2007-2876)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2007-06-08 09:05    [W:0.234 / U:0.056 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site