[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#730518: kfreebsd-10: CVE-2013-6832 nand memory leak in ioctl



On 26/11/2013 03:36, Steven Chamberlain wrote:
> Package: kfreebsd-10
> Version: 10.0~svn257123-1
> Severity: grave
> Tags: security fixed-upstream
> Control: fixed -1 kfreebsd-10/10.0~svn234760-1
> 
> http://seclists.org/bugtraq/2013/Nov/73
> 
> The nand driver was introduced into kfreebsd-10 by r235537.
> It is not included in kfreebsd-9 or kfreebsd-8 packages.
> 
> Fixed by upstream SVN commits r258387 and r258425.

Those are the head commits (both included in latest kfreebsd-11 upload).

As for stable/10 it seems to me that r258554 includes MFC of both
problems. Please can you confirm?

-- 
Robert Millan


Reply to: