Linux 2.6.16.11

Linux 2.6.16.11

[Greg KH]

We (the -stable team) are announcing the release of the 2.6.16.11 kernel
(because just one -stable kernel a day is obviously not enough...)

The diffstat and short summary of the fixes are below.

I'll also be replying to this message with a copy of the patch between
2.6.16.10 and 2.6.16.11, as it is small enough to do so.

The updated 2.6.16.y git tree can be found at:
 	rsync://rsync.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
and can be browsed at the normal kernel.org git web browser:
	www.kernel.org/git/

thanks,

greg k-h

--------

 Makefile      |    2 +-
 fs/cifs/dir.c |   14 ++++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

Summary of changes from v2.6.16.10 to v2.6.16.11
================================================

Greg Kroah-Hartman:
      Linux 2.6.16.11

Steve French:
      Don't allow a backslash in a path component (CVE-2006-1863)

Re: Linux 2.6.16.11

[Greg KH]

diff --git a/Makefile b/Makefile
index 9ebe182..e86b4ba 100644
--- a/Makefile
+++ b/Makefile
@@ -1,7 +1,7 @@
 VERSION = 2
 PATCHLEVEL = 6
 SUBLEVEL = 16
-EXTRAVERSION = .10
+EXTRAVERSION = .11
 NAME=Sliding Snow Leopard
 
 # *DOCUMENTATION*
diff --git a/fs/cifs/dir.c b/fs/cifs/dir.c
index fed55e3..5e562bc 100644
--- a/fs/cifs/dir.c
+++ b/fs/cifs/dir.c
@@ -441,6 +441,20 @@ cifs_lookup(struct inode *parent_dir_ino
 	cifs_sb = CIFS_SB(parent_dir_inode->i_sb);
 	pTcon = cifs_sb->tcon;
 
+	/*
+	 * Don't allow the separator character in a path component.
+	 * The VFS will not allow "/", but "\" is allowed by posix.
+	 */
+	if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS)) {
+		int i;
+		for (i = 0; i < direntry->d_name.len; i++)
+			if (direntry->d_name.name[i] == '\\') {
+				cFYI(1, ("Invalid file name"));
+				FreeXid(xid);
+				return ERR_PTR(-EINVAL);
+			}
+	}
+
 	/* can not grab the rename sem here since it would
 	deadlock in the cases (beginning of sys_rename itself)
 	in which we already have the sb rename sem */

Re: Linux 2.6.16.11

[Nick Warne]

On 24/04/06, Greg KH <gregkh@suse.de> wrote:
> We (the -stable team) are announcing the release of the 2.6.16.11 kernel
> (because just one -stable kernel a day is obviously not enough...)

Good job I had to update ketchup twice today as well then! ;-)

Nick

Re: Linux 2.6.16.11

[Bill Davidsen]

Greg KH wrote:
> We (the -stable team) are announcing the release of the 2.6.16.11 kernel
> (because just one -stable kernel a day is obviously not enough...)
> 
> The diffstat and short summary of the fixes are below.
> 
> I'll also be replying to this message with a copy of the patch between
> 2.6.16.10 and 2.6.16.11, as it is small enough to do so.
> 
> The updated 2.6.16.y git tree can be found at:
>  	rsync://rsync.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.16.y.git
> and can be browsed at the normal kernel.org git web browser:
> 	www.kernel.org/git/
> 
> thanks,
> 
> greg k-h

Looks good, I dropped it on an ASUS laptop running FC4 and everything 
works, including the selinux stuff. However, I did note these things:
1 - sounds has stopped working on the FC4 kernel (again) 2.6.16.11 ok
2 - at boot, the 2.6.16.11 kernel stops after the "storage" text in the 
"initializing" line, and hangs long enough for me to say "Oh .... it 
hung" before continuing.
3 - ipw2200 wireless continues to work flawlessly. I mention this 
because there was a time when every patch was an adventure.

Thanks for the patches.
-- 
    -bill davidsen (davidsen@tmr.com)
"The secret to procrastination is to put things off until the
  last possible moment - but no longer"  -me