summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* kernel: udf: CVE-2014-6410Sona Sarmadi2015-07-062-0/+97
| | | | | | | | | Avoid infinite loop when processing indirect ICBs Reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* mnt: CVE-2014-5206 and CVE-2014-5207Sona Sarmadi2015-07-065-0/+325
| | | | | | | | | | kernel: mount flags handling during remount References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5206 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5207 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* Kernel: net: IPv6: crash due to router advertisement floodingSona Sarmadi2015-07-062-0/+37
| | | | | | | | | | This patch fixes CVE-2014-2309. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2309 http://www.openwall.com/lists/oss-security/2014/03/07/6 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* Kernel/SCTP: fix a NULL pointer dereferenceSona Sarmadi2015-07-062-0/+42
| | | | | | | | | | | | | | | | A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system. Upstream-Status: Backport (from v3.16, commit 1be9a950c646c) References: - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077 - http://patchwork.ozlabs.org/patch/372475/ Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* fs/isofs: Fix for CVE-2014-5471 and CVE-2014-5472Sona Sarmadi2015-07-062-0/+213
| | | | | | | | | | Fix unbounded recursion when processing relocated directories References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* n_tty: Fix n_tty_write crash when echoing in raw modeSona Sarmadi2015-07-062-0/+87
| | | | | | | | | Fix for CVE-2014-0196. Reference http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0196 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* kernel: futex: pi futexes requeue issueSona Sarmadi2015-07-062-0/+84
| | | | | | Fix for CVE-2014-3153 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* initial commit for Enea Linux 4.0Adrian Dudau2014-06-26234-0/+47442
Migrated from the internal git server on the daisy-enea branch Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>