Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

[Willy Tarreau <w () 1wt eu>]

On Thu, Oct 15, 2009 at 10:33:15AM +0800, Eugene Teo wrote:
> Eugene Teo wrote:
> > Eugene Teo wrote:
> > > [...]
> > > >  CVE-2005-4881 - tc_fill_qdisc()  (at least)
> > >
> > > This requires http://patchwork.ozlabs.org/patch/35412/ too. There was 
> > > a typo in the upstream commit 9ef1d4c7.
> >
> > I'm not sure but perhaps this needs a new CVE name. This infoleak bug 
> > was introduced in 2005, but was discovered and fixed recently.
>
> This is assigned with CVE-2009-3612 - incomplete fix for CVE-2005-4881.

and 2.4 has it too since the 2.6 patch applied cleanly.

Thanks,
Willy