Date: Mon, 04 May 2009 10:45:54 +0800 From: Eugene Teo <eugene@...hat.com> To: oss-security@...ts.openwall.com Subject: CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case Not upstream in 2.6.30, as the function was removed there. Node and port send checks can skip in the compat_net=1 case. This bug was introduced in commit effad8d. This is fixed in 220.127.116.11 and 18.104.22.168. I believe it will be fixed in 2.6.29.y soon.  http://lwn.net/Articles/331434/  http://lwn.net/Articles/331435/ Thanks, Eugene
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.