Comment 6 for bug 894369

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 2.6.24-30.98

---------------
linux (2.6.24-30.98) hardy-proposed; urgency=low

  [Herton R. Krzesinski]

  * Release Tracking Bug
    - LP: #910893

  [Upstream Kernel Changes]

  * TPM: Zero buffer after copying to userspace, CVE-2011-1162
    - LP: #899463
    - CVE-2011-1162
  * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops, CVE-2011-2203
    - LP: #899466
    - CVE-2011-2203
  * KEYS: Fix a NULL pointer deref in the user-defined key type,
    CVE-2011-4110
    - LP: #894369, #unable to handle kernel NULL pointer dereference at 0000000000000008
    - CVE-2011-4110
  * ieee80211: Add IEEE80211_MAX_FRAME_LEN to linux/ieee80211.h
    - LP: #905060
    - CVE-2011-3359
  * b43: allocate receive buffers big enough for max frame len + offset
    - LP: #905060
    - CVE-2011-3359
 -- Herton Ronaldo Krzesinski <email address hidden> Mon, 02 Jan 2012 14:12:10 -0200