** Description changed: - [information leak in Rock Ridge Extensions to iso9660] + The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux + kernel before 4.5.5 mishandles NM (aka alternate name) entries + containing \0 characters, which allows local users to obtain sensitive + information from kernel memory or possibly have unspecified other impact + via a crafted isofs filesystem. Break-Fix: - 99d825822eade8d827a1817357cbf3f889a552d6
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1583962 Title: CVE-2016-4913 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1583962/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
