** Changed in: linux-lts-backport-natty (Ubuntu Lucid)
Status: In Progress => Fix Committed
** Changed in: linux-lts-backport-maverick (Ubuntu Lucid)
Status: In Progress => Fix Committed
** Description changed:
The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel
before 3.1-rc3 does not validate the length attribute of long symlinks,
which allows local users to cause a denial of service (incorrect pointer
dereference and OOPS) by accessing a long symlink on a malformed Be
filesystem.
+
+ Break-Fix: - 338d0f0a6fbc82407864606f5b64b75aeb3c70f2
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/834124
Title:
CVE-2011-2928
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/834124/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
