oss-sec mailing list archives
CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case
From: Eugene Teo <eugene () redhat com>
Date: Mon, 04 May 2009 10:45:54 +0800
Not upstream in 2.6.30, as the function was removed there. Node and port send checks can skip in the compat_net=1 case. This bug was introduced in commit effad8d. This is fixed in 2.6.27.21[1] and 2.6.28.10[2]. I believe it will be fixed in 2.6.29.y soon. [1] http://lwn.net/Articles/331434/ [2] http://lwn.net/Articles/331435/ Thanks, Eugene
Current thread:
- CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case Eugene Teo (May 03)