Re: CVE-2012-0038

[Moritz Mühlenhoff <jmm@inutil.org>]

On Fri, Mar 23, 2012 at 06:20:07PM +0100, Laurent Bonnaud wrote:
> Hi,
> 
> I am looking at this page:
> 
>   http://security-tracker.debian.org/tracker/CVE-2012-0038
> 
> and kernel 3.2.12-1 in sid and wheezy is marked as vulnerable.  However
> the fixes for this bug are here:
> 
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce
> 
> and I checked that *both* fixes are in linux-2.6-3.2.12/fs/xfs/xfs_acl.c .
> 
> So could somebody please mark this bug as fixed in sid+wheezy?

Thanks, I've updated the tracker.

Cheers,
        Moritz