Linux 2.4.34.3

Linux 2.4.34.3

[Willy Tarreau]

I've just released Linux 2.4.34.3.

Nothing critical, just a bunch of bugfixes and small security fix.

The patch and changelog will appear soon at the following locations:
  ftp://ftp.kernel.org/pub/linux/kernel/v2.4/
  ftp://ftp.kernel.org/pub/linux/kernel/v2.4/patch-2.4.34.3.bz2
  ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3

Git repository:
   git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-v2.4.34.3.y.git
  http://www.kernel.org/pub/scm/linux/kernel/git/stable/linux-v2.4.34.3.y.git

Git repository through the gitweb interface:
  http://git.kernel.org/?p=linux/kernel/git/stable/linux-v2.4.34.3.y.git

Fixed in this version :
  CVE-2007-1353 : Bluetooth: L2CAP and HCI setsockopt() information leaks

Summary of changes from v2.4.34.2 to v2.4.34.3
============================================

Willy Tarreau (6):
      [DECNet] fib: Fix out of bound access of dn_fib_props[]
      [IPv4] fib: Fix out of bound access of fib_props[]
      [PPP]: Don't leak an sk_buff on interface destruction.
      Fix TCP receiver side SWS handling
      Bluetooth: L2CAP and HCI setsockopt() information leaks (CVE-2007-1353)
      Change VERSION to 2.4.34.3

Re: Linux 2.4.34.3

[Urs Thuermann]

Willy Tarreau <wtarreau@hera.kernel.org> writes:

> I've just released Linux 2.4.34.3.
> 
> Nothing critical, just a bunch of bugfixes and small security fix.

I get the following compile error:

gcc -D__KERNEL__ -I/usr/src/linux-2.4.34.3-ut/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fno-builtin-sprintf -fomit-frame-pointer  -pipe -mpreferred-stack-boundary=2 -fno-guess-branch-probability -march=i686 -fno-unit-at-a-time   -nostdinc -iwithprefix include -DKBUILD_BASENAME=fib_semantics  -c -o fib_semantics.o fib_semantics.c
fib_semantics.c: In function `fib_create_info':
fib_semantics.c:436: error: label `errout' used but not defined
make[3]: *** [fib_semantics.o] Error 1
make[3]: Leaving directory `/usr/src/linux-2.4.34.3-ut/net/ipv4'
make[2]: *** [first_rule] Error 2
make[2]: Leaving directory `/usr/src/linux-2.4.34.3-ut/net/ipv4'
make[1]: *** [_subdir_ipv4] Error 2
make[1]: Leaving directory `/usr/src/linux-2.4.34.3-ut/net'
make: *** [_dir_net] Error 2

The appended patch fixes this problem.


urs


--- net/ipv4/fib_semantics.c.orig	2007-04-22 13:31:23.000000000 +0000
+++ net/ipv4/fib_semantics.c	2007-04-22 13:31:42.000000000 +0000
@@ -433,7 +433,7 @@
 
 	if (r->rtm_type > RTN_MAX) {
 		err = -EINVAL;
-		goto errout;
+		goto failure;
 	}
 
 	/* Fast check to catch the most weird cases */

Re: Linux 2.4.34.3

[Willy Tarreau]

On Sun, Apr 22, 2007 at 03:33:58PM +0200, Urs Thuermann wrote:
> Willy Tarreau <wtarreau@hera.kernel.org> writes:
> 
> > I've just released Linux 2.4.34.3.
> > 
> > Nothing critical, just a bunch of bugfixes and small security fix.
> 
> I get the following compile error:

[snip]

Grrr... I'm very sorry. Thanks for your patch, I'll fix it and 35-pre3 at the
same time. I think I should do -rc1 as does Adrian on 2.6, but it's twice as
much work.

Thanks,
Willy