OpenAFS CVE-2015-8312 Local DoS Vulnerability Fix via pioctl

Critical Vulnerability Information Security-Related Changes Client Platforms: CVE-2015-8312: Fixed a vulnerability in the logic that allowed a local user to overwrite a kernel buffer with a single byte, potentially leading to a denial-of-service condition. This fix is associated with and . Other Important Fixes All Platforms: Improved Diagnostics and Error Messages: Enhanced diagnostics and error messages (related IDs: 11586, 11587) All Server Platforms: Several Fixes Regarding Volume Dump Creation and Restore: Resolved multiple issues related to volume dump creation and restore (related IDs: 11433, 11553, 11825, 11826, 12082). All Client Platforms: Avoid a Potential Denial-of-Service Issue: Fixed a vulnerability in the logic that could lead to a denial-of-service condition (related ID: CT #132256, CVE-2015-8312) Refuse to Change Multi-Homed Server Entries: Will refuse to change multi-homed server entries using unless the parameter is provided, to prevent corruption of these entries (related ID: 12087) Linux Clients: Avoid Following a Symbolic Link: During Red Hat packaging, avoid following symbolic links when writing the client to prevent file overwrites (related ID: 12081) Avoid a Conflict of openafs-debuginfo with krb5-debuginfo: Avoid conflict with by excluding our executable during processing (related ID: 12128, RT #131771)

Goal Reached Thanks to every supporter — we hit 100%!

OpenAFS CVE-2015-8312 Local DoS Vulnerability Fix via pioctl