[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20120518113005.GM26453@dhcp-25-225.brq.redhat.com>
Date: Fri, 18 May 2012 13:30:06 +0200
From: Petr Matousek <pmatouse@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request -- kernel: incomplete fix for CVE-2011-4131
The fix for CVE-2011-4131 was not complete. Malicious NFS server could
still crash the clients when more than 2 GETATTR bitmap words are
returned in response to the FATTR4_ACL attribute request.
Upstream fixes:
20e0fa98b751facf9a1101edaefbc19c82616a68
5794d21ef4639f0e33440927bb903f9598c21e92
5a00689930ab975fdd1b37b034475017e460cf2a
Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=822869
Thanks,
--
Petr Matousek / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
