Security: fixed an exploitable DoS bug in FPU exception handling code in linux-2.6.6

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@3782 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

chapter01/changelog.xml

@@ -67,6 +67,7 @@ first a summary, then a detailed log.</para>
 <listitem><para>iana-etc-1.00</para></listitem>
 <listitem><para>inetutils-1.4.2-kernel_headers-1.patch</para></listitem>
 <listitem><para>inetutils-1.4.2-no_server_man_pages-1.patch</para></listitem>
+<listitem><para>linux-2.6.6-fpu-1.patch</para></listitem>
 <listitem><para>linux-libc-headers-2.6.6.0</para></listitem>
 <listitem><para>mktemp-1.5</para></listitem>
 <listitem><para>mktemp-1.5-add_tempfile-1.patch</para></listitem>
@@ -107,6 +108,9 @@ first a summary, then a detailed log.</para>
 </itemizedlist>
 </listitem>
 
+<listitem><para>June 13, 2004 [alexander]: Security: added
+linux-2.6.6-fpu-1.patch</para></listitem>
+
 <listitem><para>June 12, 2004 [jeremy]: Chapter 6 - Hotplug - corrected the
 name of the bogus deps patch</para></listitem>
 

chapter03/patches.xml

@@ -105,6 +105,14 @@ following:</para>
 </listitem>
 </varlistentry>
 
+<varlistentry>
+<term>Linux FPU Exceptions Security Fix - 1 KB:</term>
+<listitem>
+<para><ulink
+url="&patches-root;linux-&linux-version;-fpu-1.patch"/></para>
+</listitem>
+</varlistentry>
+
 <varlistentry>
 <term>Man 80-Columns Patch - 1 KB:</term>
 <listitem>

chapter08/kernel.xml

@@ -43,6 +43,10 @@ recommends that this command be issued prior to <emphasis>each</emphasis>
 kernel compilation. You shouldn't rely on the source tree being clean after
 un-tarring.</para>
 
+<para>Fix an exploitable bug in FPU exception handling code:</para>
+
+<screen><userinput>patch -Np1 -i ../linux-&linux-version;-fpu-1.patch</userinput></screen>
+
 <para>Configure the kernel via a menu-driven interface:</para>
 
 <screen><userinput>make menuconfig</userinput></screen>

general.ent

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="ISO-8859-1"?>
-<!ENTITY version "CVS-20040612">
-<!ENTITY releasedate "June 12, 2004">
+<!ENTITY version "CVS-20040613">
+<!ENTITY releasedate "June 13, 2004">
 <!ENTITY milestone "6.0">
 
 <!ENTITY lfs-root "http://www.linuxfromscratch.org/">