summaryrefslogtreecommitdiffstats
path: root/kernel.spec
diff options
context:
space:
mode:
authorJosh Boyer <jwboyer@fedoraproject.org>2014-06-25 08:29:10 -0400
committerJosh Boyer <jwboyer@fedoraproject.org>2014-06-25 08:29:34 -0400
commit3d7abd60bf118315af2ef58da94462eef626d81b (patch)
tree5b3b2cf555512792f5dcc9defa3ab3ff7ff4cc14 /kernel.spec
parentc90b4f95b3325d96ffdba63220962033fa8841aa (diff)
downloadkernel-3d7abd60bf118315af2ef58da94462eef626d81b.tar.gz
kernel-3d7abd60bf118315af2ef58da94462eef626d81b.tar.xz
kernel-3d7abd60bf118315af2ef58da94462eef626d81b.zip
CVE-2014-0206 aio: insufficient head sanitization in aio_read_events_ring (rhbz 1094602 1112975)
Diffstat (limited to 'kernel.spec')
-rw-r--r--kernel.spec11
1 files changed, 11 insertions, 0 deletions
diff --git a/kernel.spec b/kernel.spec
index 0ec88567f..7df6895ec 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -741,6 +741,10 @@ Patch25104: intel_pstate-Update-documentation-of-max-min_perf_pct-sysfs-files.pa
#CVE-2014-4508 rhbz 1111590 1112073
Patch25106: x86_32-entry-Do-syscall-exit-work-on-badsys.patch
+#CVE-2014-0206 rhbz 1094602 1112975
+Patch25107: aio-fix-kernel-memory-disclosure-in-io_getevents-int.patch
+Patch25108: aio-fix-aio-request-leak-when-events-are-reaped-by-u.patch
+
# END OF PATCH DEFINITIONS
%endif
@@ -1450,6 +1454,10 @@ ApplyPatch intel_pstate-Update-documentation-of-max-min_perf_pct-sysfs-files.pat
#CVE-2014-4508 rhbz 1111590 1112073
ApplyPatch x86_32-entry-Do-syscall-exit-work-on-badsys.patch
+#CVE-2014-0206 rhbz 1094602 1112975
+ApplyPatch aio-fix-kernel-memory-disclosure-in-io_getevents-int.patch
+ApplyPatch aio-fix-aio-request-leak-when-events-are-reaped-by-u.patch
+
# END OF PATCH APPLICATIONS
%endif
@@ -2262,6 +2270,9 @@ fi
# ||----w |
# || ||
%changelog
+* Wed Jun 25 2014 Josh Boyer <jwboyer@fedoraproject.org>
+- CVE-2014-0206 aio: insufficient head sanitization in aio_read_events_ring (rhbz 1094602 1112975)
+
* Mon Jun 23 2014 Josh Boyer <jwboyer@fedoraproject.org>
- CVE-2014-4508 BUG in x86_32 syscall auditing (rhbz 1111590 1112073)