Bug#297203: marked as done (kernel-source-2.6.8: race which could allow for privilege escalation on Radeon)
Your message dated Tue, 22 Mar 2005 11:18:11 -0500
with message-id <E1DDm55-0000LI-00@newraff.debian.org>
and subject line Bug#297203: fixed in kernel-source-2.6.8 2.6.8-15
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 27 Feb 2005 21:59:06 +0000
>From sf@sfritsch.de Sun Feb 27 13:59:06 2005
Return-path: <sf@sfritsch.de>
Received: from mail-out.m-online.net [212.18.0.9]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D5WRN-0002SA-00; Sun, 27 Feb 2005 13:59:06 -0800
Received: from mail.m-online.net (svr20.m-online.net [192.168.3.148])
by mail-out.m-online.net (Postfix) with ESMTP id 76B605752
for <submit@bugs.debian.org>; Sun, 27 Feb 2005 22:59:04 +0100 (CET)
Received: from k.local (ppp-82-135-12-75.mnet-online.de [82.135.12.75])
by mail.m-online.net (Postfix) with ESMTP id 55E2D57C12
for <submit@bugs.debian.org>; Sun, 27 Feb 2005 22:59:04 +0100 (CET)
Received: from stf by k.local with local (Exim 4.44)
id 1D5WRL-0003jI-Sw
for submit@bugs.debian.org; Sun, 27 Feb 2005 22:59:03 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Stefan Fritsch <sf@sfritsch.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: kernel-source-2.6.8: race which could allow for privilege escalation on
Radeon
X-Mailer: reportbug 3.8
Date: Sun, 27 Feb 2005 22:59:03 +0100
Message-Id: <E1D5WRL-0003jI-Sw@k.local>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: kernel-source-2.6.8
Version: 2.6.8-13
Severity: critical
Tags: security
Justification: root security hole
There is a race condition in the radeon driver which has been fixed
in 2.6.11-rc4. This is part of BID-12555:
http://www.securityfocus.com/bid/12555
The same code is already in 2.6.8
The corresponding changeset is at:
http://linux.bkbits.net:8080/linux-2.6/cset%4042088d17CO1mOAfgW4R46WRTm9gkwA?nav=index.html|ChangeSet@-3w
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
---------------------------------------
Received: (at 297203-close) by bugs.debian.org; 22 Mar 2005 16:25:09 +0000
>From katie@ftp-master.debian.org Tue Mar 22 08:25:09 2005
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DDmBp-0002KV-00; Tue, 22 Mar 2005 08:25:09 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DDm55-0000LI-00; Tue, 22 Mar 2005 11:18:11 -0500
From: Andres Salomon <dilinger@debian.org>
To: 297203-close@bugs.debian.org
X-Katie: $Revision: 1.55 $
Subject: Bug#297203: fixed in kernel-source-2.6.8 2.6.8-15
Message-Id: <E1DDm55-0000LI-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Tue, 22 Mar 2005 11:18:11 -0500
Delivered-To: 297203-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Source: kernel-source-2.6.8
Source-Version: 2.6.8-15
We believe that the bug you reported is fixed in the latest version of
kernel-source-2.6.8, which is due to be installed in the Debian FTP archive:
kernel-doc-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-doc-2.6.8_2.6.8-15_all.deb
kernel-patch-debian-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-patch-debian-2.6.8_2.6.8-15_all.deb
kernel-source-2.6.8_2.6.8-15.diff.gz
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15.diff.gz
kernel-source-2.6.8_2.6.8-15.dsc
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15.dsc
kernel-source-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-source-2.6.8_2.6.8-15_all.deb
kernel-tree-2.6.8_2.6.8-15_all.deb
to pool/main/k/kernel-source-2.6.8/kernel-tree-2.6.8_2.6.8-15_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 297203@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andres Salomon <dilinger@debian.org> (supplier of updated kernel-source-2.6.8 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 22 Mar 2005 04:42:39 -0500
Source: kernel-source-2.6.8
Binary: kernel-source-2.6.8 kernel-doc-2.6.8 kernel-tree-2.6.8 kernel-patch-debian-2.6.8
Architecture: source all
Version: 2.6.8-15
Distribution: unstable
Urgency: high
Maintainer: Debian kernel team <debian-kernel@lists.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
kernel-doc-2.6.8 - Linux kernel specific documentation for version 2.6.8
kernel-patch-debian-2.6.8 - Debian patches to Linux 2.6.8
kernel-source-2.6.8 - Linux kernel source for version 2.6.8 with Debian patches
kernel-tree-2.6.8 - Linux kernel source tree for building Debian kernel images
Closes: 280743 297203
Changes:
kernel-source-2.6.8 (2.6.8-15) unstable; urgency=high
.
* [Security] Fix race in radeon driver which can result
in local privelage escalation. (Simon Horman) (closes: #297203)
.
* Fix locking error in RCU. (Simon Horman) (closes: #280743)
.
* [Security] Fix remote dos on ppp servers. CAN-2005-0384 (Maximilian Attems)
.
* [SECURITY] ip_copy_metadata_leak.dpatch, ip6_copy_metadata_leak.dpatch
Fix memory exhaustion DoS triggered by leaks in
ip*_copy_metadata CAN-2005-0210 (Andres Salomon).
.
* ipv4-fragment-queues-3.dpatch, ipv4-fragment-queues-3.dpatch,
ipv4-fragment-queues-2.1.dpatch
Revert patches -queues-3 and -queues-4 to revert ABI, for
sarge's rc3; also add patch -queues-2.1, which fixes a race in
-queues-2 (Andres Salomon, Simon Horman).
Files:
d61634561c7cd1bc871359c6b9fe872c 956 devel optional kernel-source-2.6.8_2.6.8-15.dsc
ce58821d47835c01a0efad468e444fb0 896015 devel optional kernel-source-2.6.8_2.6.8-15.diff.gz
cd083b401dfb7161ae4557fa0f2148e4 874784 devel optional kernel-patch-debian-2.6.8_2.6.8-15_all.deb
20fb538ad39c2e0de67c40241ad6a84d 34922370 devel optional kernel-source-2.6.8_2.6.8-15_all.deb
24cf6d29d140d17be08ce26d4bfe4b2c 27518 devel optional kernel-tree-2.6.8_2.6.8-15_all.deb
3553ff071258b7b7a760df41a062ce7a 6174432 doc optional kernel-doc-2.6.8_2.6.8-15_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCP/Pe78o9R9NraMQRAp1bAJ0Rhr+hLyCXIQZJ0fcrhtt4Sxk8oACfUXOJ
eFMov1UyhPHlOw8LZ2o7jXM=
=GWjv
-----END PGP SIGNATURE-----
Reply to: