Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-0.8.git;a=commitdiff;h=0a694d1ddcdd6ae1b714307127984d0d210bd3cb
commit 0a694d1ddcdd6ae1b714307127984d0d210bd3cb Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Wed Apr 30 21:56:50 2008 +0200 kernel-2.6.24-4kalgan1-i686 - update to 2.6.24.5 - add CVE-2008-1375.patch - closes #3050 diff --git a/source/base/kernel/CVE-2008-1375.patch b/source/base/kernel/CVE-2008-1375.patch new file mode 100644 index 0000000..fc9a7a0 --- /dev/null +++ b/source/base/kernel/CVE-2008-1375.patch @@ -0,0 +1,23 @@ +diff --git a/fs/dnotify.c b/fs/dnotify.c +index 28d01ed..4509dae 100644 +--- a/fs/dnotify.c ++++ b/fs/dnotify.c +@@ -20,6 +20,7 @@ + #include <linux/init.h> + #include <linux/spinlock.h> + #include <linux/slab.h> ++#include <linux/file.h> + + int dir_notify_enable __read_mostly = 1; + +@@ -92,6 +93,10 @@ int fcntl_dirnotify(int fd, struct file *filp, unsigned long arg) + prev = &odn->dn_next; + } + ++ /* we'd lost the race with close(), sod off silently */ ++ if (fcheck(fd) != filp) ++ goto out_free; ++ + error = __f_setown(filp, task_pid(current), PIDTYPE_PID, 0); + if (error) + goto out_free; diff --git a/source/base/kernel/FrugalBuild b/source/base/kernel/FrugalBuild index 86c3afa..db79cbc 100644 --- a/source/base/kernel/FrugalBuild +++ b/source/base/kernel/FrugalBuild @@ -1,7 +1,7 @@ # Compiling Time: 14.33 SBU # Maintainer: VMiklos <[EMAIL PROTECTED]> -_F_kernel_patches=(revert-NET_Add-if_addrlabel.h-to_sanitized_headers.patch) +_F_kernel_patches=(CVE-2008-1375.patch) Finclude kernel # you can safely bump this. -pkgrel=3 +pkgrel=4kalgan1 diff --git a/source/base/kernel/revert-NET_Add-if_addrlabel.h-to_sanitized_headers.patch b/source/base/kernel/revert-NET_Add-if_addrlabel.h-to_sanitized_headers.patch deleted file mode 100644 index dad14df..0000000 --- a/source/base/kernel/revert-NET_Add-if_addrlabel.h-to_sanitized_headers.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -Naur linux-2.6.24/include/linux/Kbuild linux-2.6.24-revert/include/linux/Kbuild ---- linux-2.6.24/include/linux/Kbuild 2008-02-27 13:51:11.000000000 +0100 -+++ linux-2.6.24-revert/include/linux/Kbuild 2008-02-27 13:48:47.000000000 +0100 -@@ -217,7 +217,6 @@ - unifdef-y += icmp.h - unifdef-y += icmpv6.h - unifdef-y += if_addr.h --unifdef-y += if_addrlabel.h - unifdef-y += if_arp.h - unifdef-y += if_bridge.h - unifdef-y += if_ec.h diff --git a/source/include/kernel-version.sh b/source/include/kernel-version.sh index f09be16..a4e1be0 100644 --- a/source/include/kernel-version.sh +++ b/source/include/kernel-version.sh @@ -18,4 +18,4 @@ # don't touch these two! _F_kernelver_ver=2.6.24 _F_kernelver_rel=3 -_F_kernelver_stable=3 +_F_kernelver_stable=5 _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
