LWN.net Logo

Linux 2.6.17.10

From:  Greg KH <gregkh@suse.de>
To:  linux-kernel@vger.kernel.org
Subject:  Linux 2.6.17.10
Date:  Tue, 22 Aug 2006 12:27:28 -0700
Cc:  Andrew Morton <akpm@osdl.org>, torvalds@osdl.org, stable@kernel.org
Archive-link:  Article, Thread

We (the -stable team) are announcing the release of the 2.6.17.10 kernel.

It contains three security fixes: one for SCTP, one for UDF filesystems,
and one that only can be triggered by a local root user.

I'll also be replying to this message with a copy of the patch between
2.6.17.9 and 2.6.17.10, as it is small enough to do so.

The updated 2.6.17.y git tree can be found at:
 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.17.y.git
and can be browsed at the normal kernel.org git web browser:
	www.kernel.org/git/

thanks,

greg k-h

--------

 Makefile                 |    2 -
 block/elevator.c         |    3 +-
 fs/udf/super.c           |    2 -
 fs/udf/truncate.c        |   64 ++++++++++++++++++++++++++++-------------------
 include/net/sctp/sctp.h  |   13 ---------
 include/net/sctp/sm.h    |    3 --
 net/sctp/sm_make_chunk.c |   30 ++++++----------------
 net/sctp/sm_statefuns.c  |   20 ++------------
 net/sctp/socket.c        |   10 ++++++-
 9 files changed, 66 insertions(+), 81 deletions(-)

Summary of changes from v2.6.17.9 to v2.6.17.10
===============================================

Greg Kroah-Hartman:
      Linux 2.6.17.10

Jan Kara:
      Fix possible UDF deadlock and memory corruption (CVE-2006-4145)

Oleg Nesterov:
      elv_unregister: fix possible crash on module unload

Sridhar Samudrala:
      Fix sctp privilege elevation (CVE-2006-3745)


Copyright © 2006, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds