|
Subject: Linux 2.4.37.8 Newsgroups: gmane.linux.kernel Date: 2010-01-31 09:36:26 GMT (2 years, 15 weeks, 5 days, 12 hours and 50 minutes ago) Hi, I've just released Linux 2.4.37.8. It mainly fixes a recently discovered vulnerability in the e1000 driver which could allow a carefully crafted frame to bypass packet filtering (CVE-2009-4536). Users who don't run this driver probably don't need to upgrade. The patch and changelog will appear soon at the following locations: ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ ftp://ftp.kernel.org/pub/linux/kernel/v2.4/patch-2.4.37.8.bz2 ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.8 Git repository: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.4.37.y.git http://www.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.4.37.y.git Git repository through the gitweb interface: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git Regards, Willy --- Summary of changes from v2.4.37.7 to v2.4.37.8 ============================================ Jesse Brandeburg (1): e1000: enhance frame fragment detection (CVE-2009-4536) Max Dmitrichenko (1): dmi: fix year parsing in dmi_check_blacklist() Thomas Bork (1): scsi: fix error with 'scsi remove-single-device' in kernel 2.4.x Willy Tarreau (3): tty: also mark the a2232 driver as broken Makefile: add the 'cscope' target. Change VERSION to 2.4.37.8 |
|