Bug#302864: CAN-2005-0815: Multiple security problems in ISO9660 and Rockridge Code
tags 302864 +pending
thanks
On Sun, Apr 03, 2005 at 03:15:44PM +0200, Moritz Muehlenhoff wrote:
> Package: kernel-source-2.4.27
> Severity: important
> Tags: security patch
>
> I'm sure you are already aware of this, but here it is nonetheless:
>
> CAN-2005-0815 describes multiple problems in the ISO9660 and Rockridge-
> Code that may lead to memory corruption and possibly code execution through
> carefully crafted ISO images.
>
> The relevant 2.4 patches from Bitkeeper are:
> http://linux.bkbits.net:8080/linux-2.4/gnupatch@4244a417jb-ZTWgax2mcR2so3l3KaQ
> http://linux.bkbits.net:8080/linux-2.4/gnupatch@4244a3d91w2q8hQzZefX9zsDlTlJtA
> http://linux.bkbits.net:8080/linux-2.4/gnupatch@4244a3aeRsXj7r4AC7s1QgPvWpjtoA
Thanks, as always.
This fix is in SVN and should appear in the next release.
--
Horms
Reply to: