From: Ben Collins <bcollins@debian.org>
To: Moritz Muehlenhoff <jmm@informatik.uni-bremen.de>
Cc: linux-kernel@vger.kernel.org
Subject: Re: Status of IEEE1394 vulnerability in 2.4
Date: Tue, 20 Jul 2004 21:26:21 -0400 [thread overview]
Message-ID: <20040721012621.GA10720@phunnypharm.org> (raw)
In-Reply-To: <p6q0t1-2a3.ln1@legolas.mmuehlenhoff.de>
On Wed, Jul 21, 2004 at 02:32:57AM +0200, Moritz Muehlenhoff wrote:
> Hi,
> what's the status of the IEEE 1394 vulnerability wrt
> kernel 2.4? [1]
> Will it be fixed in 2.4.27? rc3 is two weeks old and
> there haven't been bitkeeper snapshots since April.
I have yet to fix them. Note that they are NOT as serious as described.
One requires a local user to have access to the devices. Generally this
isn't the default case. The other one requires maliciously changed
firmware in an external device. Not too many people have the know-how and
desire to do this, just to crash your system (they would have better luck
just beating your box with a hammer).
The other bug about allocating huge amounts of memory is just plain wrong,
and is not a bug. It cannot happen.
I'll be fixing things this weekend.
--
Debian - http://www.debian.org/
Linux 1394 - http://www.linux1394.org/
Subversion - http://subversion.tigris.org/
WatchGuard - http://www.watchguard.com/
prev parent reply other threads:[~2004-07-21 2:15 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-07-21 0:32 Moritz Muehlenhoff
2004-07-21 1:26 ` Ben Collins [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040721012621.GA10720@phunnypharm.org \
--to=bcollins@debian.org \
--cc=jmm@informatik.uni-bremen.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®