I've just released Linux 2.4.35.4.
It fixes very minor issues, but some patches have been resting here
for a long time, and there was no reason to hold them. Two minor
old vulnerabilities were fixed :
- CVE-2006-5823 would cause the kernel to oops on specially crafted
CRAMFS filesystems, though on 2.4.35 we never got more than an
error in the logs. The fix was merged anyway.
- CVE-2004-2731 corresponds to an incorrect size check in sparc's
openprom driver. It was fixed in 2.5 but not in 2.4.
The patch and changelog will appear soon at the following locations:
ftp://ftp.all.kernel.org/pub/linux/kernel/v2.4/ftp://ftp.all.kernel.org/pub/linux/kernel/v2.4/patch-2.4.35.4.bz2ftp://ftp.all.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.4
Git repository:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-v2.4.35.y.git
http://www.kernel.org/pub/scm/linux/kernel/git/stable/linux-v2.4.35.y.git
Git repository through the gitweb interface:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-v2.4.35.y.git
Regards,
Willy
---
Summary of changes from v2.4.35.3 to v2.4.35.4
============================================
Franck Bourdonnec (1):
fix missing MODULE_LICENSE in some drivers
Gilles Espinasse (1):
fix unresolved symbols on alpha
Moritz Muehlenhoff (1):
corrupted cramfs filesystems cause kernel oops (CVE-2006-5823)
Tony Battersby (1):
sym53c8xx_2 SMP deadlock on driver load
Willy Tarreau (2):
PPP: fix crash using usb-serial on high speed devices
Change VERSION to 2.4.35.4
dann frazier (4):
[OpenPROM]: Fix signedness bug in openprom char driver
[OpenPROM]: Fix user-access checking bugs in openpromfs
[OpenPROM] Prevent overflow of sprintf buffer
[OpenPROM] Prevent unsigned roll-overs in
-
