Your message dated Tue, 22 Mar 2005 11:18:11 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#297203: fixed in kernel-source-2.6.8 2.6.8-15
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 27 Feb 2005 21:59:06 +0000
>From [EMAIL PROTECTED] Sun Feb 27 13:59:06 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail-out.m-online.net [212.18.0.9]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D5WRN-0002SA-00; Sun, 27 Feb 2005 13:59:06 -0800
Received: from mail.m-online.net (svr20.m-online.net [192.168.3.148])
by mail-out.m-online.net (Postfix) with ESMTP id 76B605752
for <[EMAIL PROTECTED]>; Sun, 27 Feb 2005 22:59:04 +0100 (CET)
Received: from k.local (ppp-82-135-12-75.mnet-online.de [82.135.12.75])
by mail.m-online.net (Postfix) with ESMTP id 55E2D57C12
for <[EMAIL PROTECTED]>; Sun, 27 Feb 2005 22:59:04 +0100 (CET)
Received: from stf by k.local with local (Exim 4.44)
id 1D5WRL-0003jI-Sw
for [EMAIL PROTECTED]; Sun, 27 Feb 2005 22:59:03 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Stefan Fritsch <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: kernel-source-2.6.8: race which could allow for privilege escalation on
Radeon
X-Mailer: reportbug 3.8
Date: Sun, 27 Feb 2005 22:59:03 +0100
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: kernel-source-2.6.8
Version: 2.6.8-13
Severity: critical
Tags: security
Justification: root security hole
There is a race condition in the radeon driver which has been fixed
in 2.6.11-rc4. This is part of BID-12555:
http://www.securityfocus.com/bid/12555
The same code is already in 2.6.8
The corresponding changeset is at:
http://linux.bkbits.net:8080/linux-2.6/cset%4042088d17CO1mOAfgW4R46WRTm9gkwA?nav=index.html|[EMAIL
PROTECTED]
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
---------------------------------------
Received: (at 297203-close) by bugs.debian.org; 22 Mar 2005 16:25:09 +0000
>From [EMAIL PROTECTED] Tue Mar 22 08:25:09 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DDmBp-0002KV-00; Tue, 22 Mar 2005 08:25:09 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DDm55-0000LI-00; Tue, 22 Mar 2005 11:18:11 -0500
From: Andres Salomon <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#297203: fixed in kernel-source-2.6.8 2.6.8-15
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Tue, 22 Mar 2005 11:18:11 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Source: kernel-source-2.6.8
Source-Version: 2.6.8-15
We believe that the bug you reported is fixed in the latest version of
kernel-source-2.6.8, which is due to be installed in the Debian FTP archive:
kernel-doc-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-doc-2.6.8_2.6.8-15_all.deb
kernel-patch-debian-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-patch-debian-2.6.8_2.6.8-15_all.deb
kernel-source-2.6.8_2.6.8-15.diff.gz
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15.diff.gz
kernel-source-2.6.8_2.6.8-15.dsc
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15.dsc
kernel-source-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15_all.deb
kernel-tree-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-tree-2.6.8_2.6.8-15_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andres Salomon <[EMAIL PROTECTED]> (supplier of updated kernel-source-2.6.8
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 22 Mar 2005 04:42:39 -0500
Source: kernel-source-2.6.8
Binary: kernel-source-2.6.8 kernel-doc-2.6.8 kernel-tree-2.6.8
kernel-patch-debian-2.6.8
Architecture: source all
Version: 2.6.8-15
Distribution: unstable
Urgency: high
Maintainer: Debian kernel team <[email protected]>
Changed-By: Andres Salomon <[EMAIL PROTECTED]>
Description:
kernel-doc-2.6.8 - Linux kernel specific documentation for version 2.6.8
kernel-patch-debian-2.6.8 - Debian patches to Linux 2.6.8
kernel-source-2.6.8 - Linux kernel source for version 2.6.8 with Debian patches
kernel-tree-2.6.8 - Linux kernel source tree for building Debian kernel images
Closes: 280743 297203
Changes:
kernel-source-2.6.8 (2.6.8-15) unstable; urgency=high
.
* [Security] Fix race in radeon driver which can result
in local privelage escalation. (Simon Horman) (closes: #297203)
.
* Fix locking error in RCU. (Simon Horman) (closes: #280743)
.
* [Security] Fix remote dos on ppp servers. CAN-2005-0384 (Maximilian Attems)
.
* [SECURITY] ip_copy_metadata_leak.dpatch, ip6_copy_metadata_leak.dpatch
Fix memory exhaustion DoS triggered by leaks in
ip*_copy_metadata CAN-2005-0210 (Andres Salomon).
.
* ipv4-fragment-queues-3.dpatch, ipv4-fragment-queues-3.dpatch,
ipv4-fragment-queues-2.1.dpatch
Revert patches -queues-3 and -queues-4 to revert ABI, for
sarge's rc3; also add patch -queues-2.1, which fixes a race in
-queues-2 (Andres Salomon, Simon Horman).
Files:
d61634561c7cd1bc871359c6b9fe872c 956 devel optional
kernel-source-2.6.8_2.6.8-15.dsc
ce58821d47835c01a0efad468e444fb0 896015 devel optional
kernel-source-2.6.8_2.6.8-15.diff.gz
cd083b401dfb7161ae4557fa0f2148e4 874784 devel optional
kernel-patch-debian-2.6.8_2.6.8-15_all.deb
20fb538ad39c2e0de67c40241ad6a84d 34922370 devel optional
kernel-source-2.6.8_2.6.8-15_all.deb
24cf6d29d140d17be08ce26d4bfe4b2c 27518 devel optional
kernel-tree-2.6.8_2.6.8-15_all.deb
3553ff071258b7b7a760df41a062ce7a 6174432 doc optional
kernel-doc-2.6.8_2.6.8-15_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCP/Pe78o9R9NraMQRAp1bAJ0Rhr+hLyCXIQZJ0fcrhtt4Sxk8oACfUXOJ
eFMov1UyhPHlOw8LZ2o7jXM=
=GWjv
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
