[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[plamo:27349] linux-2.6.17.3が出ています。
-
From:名倉昭一
-
Date:Sat, 1 Jul 2006 06:49:18 +0900 (JST)
- Subject: [plamo:27349] linux-2.6.17.3が出ています。
- From: 名倉昭一<nagura-s@xxxxxxxxxxxx>
- Date: Sat, 01 Jul 2006 06:45:01 +0900
名倉 です。
linux-2.6.17.3が出ています。
以下はChangeLog-2.6.17.3の全文です。
commit 52cbb7b78994ea3799f1bbb8c03bce1e2f72a271
Author: Chris Wright <chrisw@sous-sol.org>
Date: Fri Jun 30 10:37:38 2006 -0700
Linux 2.6.17.3
commit 9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9
Author: Patrick McHardy <kaber@trash.net>
Date: Fri Jun 30 05:33:12 2006 +0200
[PATCH] NETFILTER: SCTP conntrack: fix crash triggered by packet without chunks [CVE-2006-2934]
When a packet without any chunks is received, the newconntrack variable
in sctp_packet contains an out of bounds value that is used to look up an
pointer from the array of timeouts, which is then dereferenced, resulting
in a crash. Make sure at least a single chunk is present.
Problem noticed by George A. Theall <theall@tenablesecurity.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
[検索ページ]
[メール一覧]
Plamo ML 公開システム