kernel: NFS fh_verify causes lost output (2.4 kernel)

[Debian Bug Importer]

Automatically imported from Debian bug report #288046 http://bugs.debian.org/288046

[Debian Bug Importer (debzilla)]

Automatically imported from Debian bug report #288046 http://bugs.debian.org/288046

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Fri, 31 Dec 2004 22:23:10 +0100
From: Frans Pop <email address hidden>
To: <email address hidden>
Subject: kernel: NFS fh_verify causes lost output (2.4 kernel)

Package: kernel-source-2.4.27
Severity: grave
Justification: can cause data loss

I am seeing the problem described in #255931 in the Sarges current 2.4
kernel (2.4.27-6).
The problem is also described in [1].

I have experienced data loss in my mail files that I keep in a
NFS-exported home directory because of this problem.

The Mail directory and its subdirs were set to drwx------
After changing this to drwxr-xr-x

According to #255931 this has been fixed in 2.6 kernels, but apparently it
was not fixed in 2.4 kernels.

Note: my server is running Sarge with 2.4.27 kernel; the client is running
Sarge with 2.6.8 kernel.

[1] https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=110421

Cheers,
Frans Pop

[Matt Zimmerman (mdz)]

unsupported package

[Simon Horman (horms)]

tag 288046 +patch
tag 288046 +pending

--
Horms

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Mon, 17 Jan 2005 13:20:12 +0900
From: Horms <email address hidden>
To: <email address hidden>
Subject: update

tag 288046 +patch
tag 288046 +pending

--
Horms

[Simon Horman (horms)]

Source: kernel-source-2.4.27
Source-Version: 2.4.27-8

We believe that the bug you reported is fixed in the latest version of
kernel-source-2.4.27, which is due to be installed in the Debian FTP archive:

kernel-doc-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-doc-2.4.27_2.4.27-8_all.deb
kernel-patch-debian-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-patch-debian-2.4.27_2.4.27-8_all.deb
kernel-source-2.4.27_2.4.27-8.diff.gz
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8.diff.gz
kernel-source-2.4.27_2.4.27-8.dsc
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8.dsc
kernel-source-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8_all.deb
kernel-tree-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-tree-2.4.27_2.4.27-8_all.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Horman <email address hidden> (supplier of updated kernel-source-2.4.27 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 18 Jan 2005 17:15:51 +0900
Source: kernel-source-2.4.27
Binary: kernel-tree-2.4.27 kernel-source-2.4.27 kernel-patch-debian-2.4.27 kernel-doc-2.4.27
Architecture: source all
Version: 2.4.27-8
Distribution: unstable
Urgency: high
Maintainer: Debian Kernel Team <email address hidden>
Changed-By: Simon Horman <email address hidden>
Description:
 kernel-doc-2.4.27 - Linux kernel specific documentation for version 2.4.27
 kernel-patch-debian-2.4.27 - Debian patches to Linux 2.4.27
 kernel-source-2.4.27 - Linux kernel source for version 2.4.27 with Debian patches
 kernel-tree-2.4.27 - Linux kernel tree for building prepackaged Debian kernel images
Closes: 285521 285563 288046 288272 288279 288712 289202 289517 289682 290013 290039
Changes:
 kernel-source-2.4.27 (2.4.27-8) unstable; urgency=high
 .
   * add dh_fixperms to the build targets to kernel-patch-debian-2.4.27
     to ensure that the permissions of the files in this package are
     sensible. (closes: Bug#288279) (Simon Horman)
   * Turn a make conditional into a runtime conditional to allow debian/rules
     prune to work. (closes: #289682) (Joshua Kwan)
 .
   Patches applied:
 .
   * 121_drm-locking-checks-1.diff, 121_drm-locking-checks-2.diff:
     [SECURITY] Fix insufficient locking checks in DRM code; CAN-2004-1056
     (Fabio M. Di Nitto, Dann Frazier, Simon Horman). (closes: Bug#285563)
   * 122_sec_brk-locked.diff
     [SECURITY] Fix vulnerability in the ELF loader code allowing
     local attacker to execute code as root; CAN-2004-1235. This is better
     known as the "uselib() bug". (closes: #289202) (Maximilian Attems)
   * 123_nfs_verify_eacces.diff
 ...

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Thu, 20 Jan 2005 23:17:45 -0500
From: Simon Horman <email address hidden>
To: <email address hidden>
Subject: Bug#288046: fixed in kernel-source-2.4.27 2.4.27-8

Source: kernel-source-2.4.27
Source-Version: 2.4.27-8

We believe that the bug you reported is fixed in the latest version of
kernel-source-2.4.27, which is due to be installed in the Debian FTP archive:

kernel-doc-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-doc-2.4.27_2.4.27-8_all.deb
kernel-patch-debian-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-patch-debian-2.4.27_2.4.27-8_all.deb
kernel-source-2.4.27_2.4.27-8.diff.gz
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8.diff.gz
kernel-source-2.4.27_2.4.27-8.dsc
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8.dsc
kernel-source-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-source-2.4.27_2.4.27-8_all.deb
kernel-tree-2.4.27_2.4.27-8_all.deb
  to pool/main/k/kernel-source-2.4.27/kernel-tree-2.4.27_2.4.27-8_all.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Horman <email address hidden> (supplier of updated kernel-source-2.4.27 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 18 Jan 2005 17:15:51 +0900
Source: kernel-source-2.4.27
Binary: kernel-tree-2.4.27 kernel-source-2.4.27 kernel-patch-debian-2.4.27 kernel-doc-2.4.27
Architecture: source all
Version: 2.4.27-8
Distribution: unstable
Urgency: high
Maintainer: Debian Kernel Team <email address hidden>
Changed-By: Simon Horman <email address hidden>
Description:
 kernel-doc-2.4.27 - Linux kernel specific documentation for version 2.4.27
 kernel-patch-debian-2.4.27 - Debian patches to Linux 2.4.27
 kernel-source-2.4.27 - Linux kernel source for version 2.4.27 with Debian patches
 kernel-tree-2.4.27 - Linux kernel tree for building prepackaged Debian kernel images
Closes: 285521 285563 288046 288272 288279 288712 289202 289517 289682 290013 290039
Changes:
 kernel-source-2.4.27 (2.4.27-8) unstable; urgency=high
 .
   * add dh_fixperms to the build targets to kernel-patch-debian-2.4.27
     to ensure that the permissions of the files in this package are
     sensible. (closes: Bug#288279) (Simon Horman)
   * Turn a make conditional into a runtime conditional to allow debian/rules
     prune to work. (closes: #289682) (Joshua Kwan)
 .
   Patches applied:
 .
   * 121_drm-locking-checks-1.diff, 121_drm-locking-checks-2.diff:
     [SECURITY] Fix insufficient locking checks in DRM code; CAN-2004-1056
     (Fabio M. Di Nitto, Dann Frazier, Simon Horman). (closes: Bug#285563)
   * 122_sec_brk-locked.diff
     [SECURITY] Fix vulne...