oss-security - Re: CVE request: kernel: btrfs

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2104881042.1128801279735912713.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Wed, 21 Jul 2010 14:11:52 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: dan.j.rosenberg@...il.com, coley <coley@...re.org>
Subject: Re: CVE request: kernel: btrfs


----- "Dan Rosenberg" <dan.j.rosenberg@...il.com> wrote:

> Fixes for two issues in btrfs were committed upstream:
> 
> 1.  The BTRFS_IOC_CLONE and BTRFS_IOC_CLONE_RANGE ioctls allowed a
> local user to overwrite append-only files.

Please use CVE-2010-2537.

> 
> 2.  The BTRFS_IOC_CLONE_RANGE ioctl was subject to an integer
> overflow
> in specifying offsets to copy from a file, which potentially allows a
> local user to read sensitive filesystem data.

Please use CVE-2010-2538

> 
> Reference:
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2ebc3464781ad24474abcbd2274e6254689853b5
> 

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.