Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <AANLkTimYJ2WO0ukQcAqZMqBAOb8u95KDbYcks_V9b38m@mail.gmail.com>
Date: Tue, 22 Mar 2011 06:55:48 -0400
From: Dan Rosenberg <dan.j.rosenberg@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE requests - kernel: irda/decnet issues

On Tue, Mar 22, 2011 at 3:27 AM, Eugene Teo <eugene@...hat.com> wrote:
> Both are reported by Dan Rosenberg. Description of the issues can be found
> in the following links:-
>
> irda: validate peer name and attribute lengths
> http://marc.info/?l=linux-netdev&m=130067113628164&w=2
>
> DECnet: need to validate user data and access data?
> http://marc.info/?l=linux-netdev&m=130075091711143&w=2
>

Steve Whitehouse provided some clarification on DECnet, which not an
actual security issue (thus the question mark in the thread title):
http://marc.info/?l=linux-netdev&m=130078511604840&w=2

IrDA seems to be valid though.

-Dan

> Thanks, Eugene
> --
> main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
>

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.