Re: Linux 2.6.16.25

[Bill Davidsen <davidsen@tmr.com>]

Greg KH wrote:
> We (the -stable team) are announcing the release of the 2.6.16.25 kernel.
> 
> I'll also be replying to this message with a copy of the patch between
> 2.6.16.24 and 2.6.16.25, as it is small enough to do so.

Why does the patch make it to linux-kernel-announce and the nice 
announcement, like this one, not? The short patch description is far 
more useful, since if it's to something I don't use I don't need to 
apply or examine it.
> 
> The updated 2.6.16.y git tree can be found at:
>  	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
> and can be browsed at the normal kernel.org git web browser:
> 	www.kernel.org/git/
> 
> thanks,
> 
> greg k-h
> 
> --------
> 
> 
>  Makefile       |    2 +-
>  fs/proc/base.c |    1 +
>  2 files changed, 2 insertions(+), 1 deletion(-)
> 
> Summary of changes from v2.6.16.24 to v2.6.16.23
> ================================================
> 
> Greg Kroah-Hartman:
>       Linux 2.6.16.25
> 
> Linus Torvalds:
>       Fix nasty /proc vulnerability (CVE-2006-3626)
> 


-- 
Bill Davidsen <davidsen@tmr.com>
   Obscure bug of 2004: BASH BUFFER OVERFLOW - if bash is being run by a
normal user and is setuid root, with the "vi" line edit mode selected,
and the character set is "big5," an off-by-one errors occurs during
wildcard (glob) expansion.