From 4d67b5bc522925ae66f4fd783e391baa5ed73d61 Mon Sep 17 00:00:00 2001 From: Josh Boyer Date: Fri, 7 Jun 2013 08:23:01 -0400 Subject: CVE-2013-2851 block: passing disk names as format strings (rhbz 969515 971662) --- kernel.spec | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'kernel.spec') diff --git a/kernel.spec b/kernel.spec index 9db2ea6b3..f9d09acea 100644 --- a/kernel.spec +++ b/kernel.spec @@ -754,6 +754,9 @@ Patch25033: fanotify-info-leak-in-copy_event_to_user.patch #CVE-2013-2852 rhbz 969518 971665 Patch25034: b43-stop-format-string-leaking-into-error-msgs.patch +#CVE-2013-2851 rhbz 969515 971662 +Patch25035: block-do-not-pass-disk-names-as-format-strings.patch + # END OF PATCH DEFINITIONS %endif @@ -1451,6 +1454,9 @@ ApplyPatch fanotify-info-leak-in-copy_event_to_user.patch #CVE-2013-2852 rhbz 969518 971665 ApplyPatch b43-stop-format-string-leaking-into-error-msgs.patch +#CVE-2013-2851 rhbz 969515 971662 +ApplyPatch block-do-not-pass-disk-names-as-format-strings.patch + # END OF PATCH APPLICATIONS %endif @@ -2257,6 +2263,7 @@ fi # || || %changelog * Fri Jun 07 2013 Josh Boyer +- CVE-2013-2851 block: passing disk names as format strings (rhbz 969515 971662) - CVE-2013-2852 b43: format string leaking into error msgs (rhbz 969518 971665) * Thu Jun 06 2013 Josh Boyer -- cgit