Вилли Торреу (Willy Tarreau) опубликовал обновленный патч со свежими исправлениями для ветки 2.4.x. В нее вошли исправления, касающиеся безопасности и стабильности, поэтому, рекомендуется обновиться всем пользователям ветки 2.4.x. Впрочем, большая их часть уже находится в разрабатываемой ветке 2.4.31, так что, возможно, кто-то решит подождать до выхода этой версии, что должно состояться довольно скоро.
Патч также доступен для версии 2.4.29, все возможные версии лежат здесь. Changelog следует далее.
[html]Changelog From 2.4.30-hf2 to 2.4.30-hf3 (semi-automated)
---------------------------------------
'+' = added ; '-' = removed
+ 2.4.30-ipvs-unchecked-strcpy-1.diff (the PaX team)
Replaced several unchecked strcpy() with strncpy().
+ 2.4.30-loop-off-by-one-1 (Julien Tinnes)
There is an obvious off by one bug in loop.c in kernel 2.4.
+ 2.4.30-rtnetlink-off-by-one-1 (Julien Tinnes)
[RTNETLINK]: Fix off-by-one error in rtnetlink.c
+ 2.4.30-random-poolsize-sysctl-fix-1 (Vasily Averin)
[PATCH] random poolsize sysctl fix
SWSoft Linux kernel Team has discovered that your patch which should fix a
random poolsize sysctl handler integer overflow, is wrong. You have changed
a variable definition in function proc_do_poolsize(), but you had to fix an
another function, poolsize_strategy()
+ 2.4.30-serial-null-dereference-1.diff (Julien Tinnes)
Potential null pointer dereference in serial driver.
+ 2.4.30-mtrr-off-by-one-1.diff (Brad Spengler/Julien Tinnes)
In mtrr_write(), if len==0, -1 is passed to copy_from_user(), which will
trigger BUG_ON((long)n < 0). Brad found it, Julien explained it to me.
+ 2.4.30-jfs_read_super-oops-1 (Mike Kasick)
[PATCH] JFS oops fix
Specifically, the kernel attempts to mount root with JFS first, and upon
aborting jfs_read_super(), the value of sbi->nls_tab is -1, a non-NULL
value that causes unload_nls() to be called on garbage data leading to a
NULL pointer dereference.
+ 2.4.30-usb-io_edgeport-oops-1 (Marcelo Tosatti)
USB: fix oops in io_edgeport.c driver (2.6 backport)
+ 2.4.30-stretch-ack-kills-performance-1 (David Miller)
[TCP]: Fix stretch ACK performance killer when doing ucopy.
When we are doing ucopy, we try to defer the ACK generation to
cleanup_rbuf(). This works most of the time very well, but if the
ucopy prequeue is large, this ACKing behavior kills performance.
+ 2.4.30-xfs-build-without-debug-1 (Christoph Hellwig)
[PATCH] XFS: fix compilation error
> 2.4.30 will not compile if XFS is turned on, but XFS debugging is not.
Looks like a trivial one-liner got lost when merging from the SGI CVS tree.[/html]
|