First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 155769
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Jule Slootbeek <jslootbeek@gmail.com>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 155769 depends on: Show dependency tree
Bug 155769 blocks:

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2006-11-20 07:22 0000 
MoKB reports the following Denial of Service vulnerability in the 2.6.x tree of
the Linux kernel.

The NTFS filesystem module of the Linux 2.6.x kernel fails to properly handle
corrupted data structures, leading to an exploitable denial of service
condition. This issue is similar to that explained in MOKB-05-11-2006.

------- Comment #1 From Jule Slootbeek 2006-11-27 05:30:24 0000 ------- 
CVE-2006-6060 posted:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6060

------- Comment #2 From Harlan Lieberman-Berg (RETIRED) 2006-12-22 13:59:15 0000 ------- 
hppa-sources: Gmsoft, bump to 2.6.19. Patch is not available.
mips-sources: Kumba, bump to 2.6.19. Patch is not available.
rsbac-sources: Kang, bump to 2.6.19. Patch is not available.
systrace-sources: Lcars, bump to 2.6.19. Patch is not available.
usermode-sources: Dang, bump to 2.6.19. Patch is not available.
xen-sources: Someone (hehe), bump to 2.6.19. Patch is not available.

If any of you have significant trouble performing this bump in the ~arch tree,
please comment on this bug.

------- Comment #3 From Harlan Lieberman-Berg (RETIRED) 2006-12-22 14:12:44 0000 ------- 
hppa-sources: Gmsoft, bump to 2.6.19. Patch is not available.
mips-sources: Kumba, bump to 2.6.19. Patch is not available.
rsbac-sources: Kang, bump to 2.6.19. Patch is not available.
systrace-sources: Lcars, bump to 2.6.19. Patch is not available.
usermode-sources: Dang, bump to 2.6.19. Patch is not available.
xen-sources: Someone (hehe), bump to 2.6.19. Patch is not available.

If any of you have significant trouble performing this bump in the ~arch tree,
please comment on this bug.

------- Comment #4 From Daniel Gryniewicz 2006-12-22 19:46:24 0000 ------- 
There is not yet a UML patchset for 2.6.19.  This makes it a bit difficult for
me to bump there...  I'll try to forward-port the 2.6.18 patch, but
historically this has been really difficult, so no promises.

------- Comment #5 From Guy Martin 2006-12-23 03:51:43 0000 ------- 
hppa-sources-2.6.19.1 commited.

------- Comment #6 From Daniel Drake 2007-01-01 20:19:21 0000 ------- 
Fixed in genpatches-2.6.18-8 (gentoo-sources-2.6.18-r6)

------- Comment #7 From Daniel Drake 2007-01-01 20:19:21 0000 ------- 
*** Bug 158782 has been marked as a duplicate of this bug. ***

------- Comment #8 From Daniel Gryniewicz 2007-01-02 20:00:25 0000 ------- 
usermode-sources-2.6.18-r1 added.

------- Comment #9 From Guillaume Destuynder (RETIRED) 2007-01-12 13:41:37 0000 ------- 
rsbac-sources-2.6.19 is in cvs (~arch)

------- Comment #10 From Andrew Ross (RETIRED) 2007-01-27 06:02:54 0000 ------- 
Thanks, this is fixed in xen-sources-2.6.16.28-r2, which will hit the tree in a
few hours (just waiting for the mirrors to update before I commit the ebuild).

------- Comment #11 From Harlan Lieberman-Berg (RETIRED) 2007-05-21 23:20:41 0000 ------- 
All done.
First Last Prev Next    No search results available      Search page      Enter new bug