[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[plamo:27382] linux-2.6.17.7が出ています。
-
From:名倉昭一
-
Date:Tue, 25 Jul 2006 15:08:18 +0900 (JST)
- Subject: [plamo:27382] linux-2.6.17.7が出ています。
- From: 名倉昭一<nagura-s@xxxxxxxxxxxx>
- Date: Tue, 25 Jul 2006 15:10:27 +0900
名倉 です。
linux-2.6.17.7が出ています。
以下はChangeLog-2.6.17.7よりセキリティfix部分を抜粋したものです。
commit ba4532fa45b99a866d253877372f086503a944c6
Author: Ian Abbott <abbotti@mev.co.uk>
Date: Mon Jun 26 12:59:17 2006 +0100
USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)
This patch limits the amount of outstanding 'write' data that can be
queued up for the ftdi_sio driver, to prevent userspace DoS attacks (or
simple accidents) that use up all the system memory by writing lots of
data to the serial port.
The original patch was by Guillaume Autran, who in turn based it on the
same mechanism implemented in the 'visor' driver. I (Ian Abbott)
re-targeted the patch to the latest sources, fixed a couple of errors,
renamed his new structure members, and updated the implementations of
the 'write_room' and 'chars_in_buffer' methods to take account of the
number of outstanding 'write' bytes. It seems to work fine, though at
low baud rates it is still possible to queue up an amount of data that
takes an age to shift (a job for another day!).
Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
ChangeLogを見るとセキュリティfixは一件のみですがいろいろなところで見つかった
不具合の対策まとめ版という感じです。
[検索ページ]
[メール一覧]
Plamo ML 公開システム