Bug#768104: kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#768104: kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure
From: Steven Chamberlain <steven@pyro.eu.org>
Date: Wed, 05 Nov 2014 01:05:08 +0000
Message-id: <[🔎] 20141105010508.23768.54845.reportbug@sid.kfreebsd-amd64.pyro.eu.org>
Reply-to: Steven Chamberlain <steven@pyro.eu.org>, 768104@bugs.debian.org

Package: src:kfreebsd-9
Version: 9.0-10+deb70.7
Severity: grave
Tags: security patch upstream

Hi,

kfreebsd 9.0 (not officially supported upstream) seems vulnerable to an
issue just announced in 9.1 and later:

http://security.FreeBSD.org/advisories/FreeBSD-SA-14:25.setlogin.asc

kfreebsd-8 8.3 in wheezy, kfreebsd-10 in sid/jessie, and kfreebsd-11 in
experimental also seem to be affected by this.

-- System Information:
Debian Release: jessie/sid
Architecture: kfreebsd-amd64 (x86_64)

Kernel: kFreeBSD 9.0-2-amd64-xenhvm-ipsec
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Reply to:

Follow-Ups:
- Bug#768104: marked as done (kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure)
  - From: owner@bugs.debian.org (Debian Bug Tracking System)

Prev by Date: Re: A small thanks to the kFreeBSD porters
Next by Date: Processed (with 6 errors): Re: Bug#768104: kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure
Previous by thread: Re: Bug#766250: eject: [kfreebsd] fails to open cdrom tray
Next by thread: Bug#768104: marked as done (kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure)
Index(es):
- Date
- Thread