Skip to contentSkip to conversation

Backported critical security fix from 2.6.17.4

PATCH New Rob Bradford 1 participant 1 message Jul 13, 2006

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Backported critical security fix from 2.6.17.4

Backported fix from 2.6.17.4 for "fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)"

For xen-3.0-testing repository.

Cheers,

Rob

Signature · 1 line
Rob Bradford <[email protected]>

# HG changeset patch
# User [email protected]
# Node ID 3d1dddefa2aed42c287186dc09bde89aa0a08cf8
# Parent 1e225598ce827a8d810ad57e82547ad6ed9c0258 Backported fix from 2.6.17.4 for "fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)"

patches/linux-2.6.16.13/fix-prctl-escalation.patch new file +12 -0
diff -r 1e225598ce82 -r 3d1dddefa2ae patches/linux-2.6.16.13/fix-prctl-escalation.patch
@@ -0,0 +1,12 @@
+diff -ru ../pristine-linux-2.6.16.13/kernel/sys.c./kernel/sys.c
+--- ../pristine-linux-2.6.16.13/kernel/sys.c	2006-07-13 13:01:03.000000000 +0100
++++ ./kernel/sys.c	2006-07-13 13:01:39.000000000 +0100
+@@ -1802,7 +1802,7 @@
+ 			error = current->mm->dumpable;
+ 			break;
+ 		case PR_SET_DUMPABLE:
+-			if (arg2 < 0 || arg2 > 2) {
++			if (arg2 < 0 || arg2 > 1) {
+ 				error = -EINVAL;
+ 				break;
+ 			}

_______________________________________________
Xen-devel mailing list
[email protected]
http://lists.xensource.com/xen-devel