Ack: Re: [CVE-2011-2203] hfs malicious filesystem fix

Mon Dec 5 19:44:02 UTC 2011

On Mon, Dec 05, 2011 at 07:15:02PM +0000, Andy Whitcroft wrote:
> CVE-2011-2203
> 	Clement Lecigne reports a filesystem which causes a kernel oops in
> 	hfs_find_init() trying to dereference sb->ext_tree which is NULL.
> 
> Fixes for this issue have hit precise via upstream.  Following this
> email are two patches, one for hardy and lucid/fsl-imx51, the other for
> lucid, maverick, maverick/ti-omap4, natty, natty/ti-omap4, and oneiric.
> These are both trivial cherry-picks though in the hardy, lucid/fsl-imx51
> the original check replaced in this patch is missing.
> 
> Proposing for hardy, lucid/fsl-imx51, lucid, maverick, maverick/ti-omap4,
> natty, natty/ti-omap4, and oneiric.

minor nitpicking, hardy and lucid/fsl-imx51 should have backported from
instead of cherry-picked in the changelog because of not having previous
if fix moved, I'm being boring anyway...

> 
> -apw
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
> 

-- 
[]'s
Herton