[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[plamo:27382] linux-2.6.17.7が出ています。



  名倉 です。

  linux-2.6.17.7が出ています。
  以下はChangeLog-2.6.17.7よりセキリティfix部分を抜粋したものです。
   
  commit ba4532fa45b99a866d253877372f086503a944c6
  Author: Ian Abbott <abbotti@mev.co.uk>
  Date:   Mon Jun 26 12:59:17 2006 +0100

    USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)
    
    This patch limits the amount of outstanding 'write' data that can be
    queued up for the ftdi_sio driver, to prevent userspace DoS attacks (or
    simple accidents) that use up all the system memory by writing lots of
    data to the serial port.
    
    The original patch was by Guillaume Autran, who in turn based it on the
    same mechanism implemented in the 'visor' driver.  I (Ian Abbott)
    re-targeted the patch to the latest sources, fixed a couple of errors,
    renamed his new structure members, and updated the implementations of
    the 'write_room' and 'chars_in_buffer' methods to take account of the
    number of outstanding 'write' bytes.  It seems to work fine, though at
    low baud rates it is still possible to queue up an amount of data that
    takes an age to shift (a job for another day!).
    
    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

  ChangeLogを見るとセキュリティfixは一件のみですがいろいろなところで見つかった
  不具合の対策まとめ版という感じです。


[検索ページ] [メール一覧]
Plamo ML 公開システム