Fixed with upload of 0.3.5 to Ubuntu
** Changed in: upstart (Ubuntu)
Status: In Progress => Fix Released
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
** Changed in: upstart (Ubuntu)
Status: Confirmed => In Progress
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
After discussing this, we decided that the potential impact on Edgy is
negligible, thus we will treat this as a normal bug fix.
** Visibility changed to: Public
** Changed in: Ubuntu Edgy
Status: Unconfirmed => Rejected
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
** Changed in: upstart (Ubuntu)
Importance: Undecided => Critical
** Changed in: upstart (Ubuntu)
Status: Unconfirmed => Confirmed
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mai
Fix released in 0.3.2
** Changed in: upstart (upstream)
Status: Fix Committed => Fix Released
** Changed in: Ubuntu Edgy
Assignee: (unassigned) => Ubuntu Security Team
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists
Attached is a patch for upstart 0.2.7, as found in edgy.
It marks the inotify instance file descriptor to be closed on exec.
The same patch should apply to 0.3.0 and 0.3.1.
0.3.2 will be released with the rewritten inotify code, which is not
affected by this bug.
** Attachment added: "Patch fo
Attached a proof exploit code that can be run with:
'echo ./upsploit > upsploit.txt 2>&1' | atd now
This demonstrates that we can obtain the inotify instance descriptor,
and with it, remove and add watches.
Once run, upstart is unable to notice changes to /etc/event.d
Normally the leaked watc
** Changed in: Ubuntu
Sourcepackagename: None => upstart
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
** Also affects: Ubuntu
Importance: Undecided
Status: Unconfirmed
** Visibility changed to: Private
** This bug has been flagged as a security issue
--
File descriptor leak allows DoS
https://launchpad.net/bugs/83099
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://l
