[Midnightbsd-users] MidnightBSD 1.2.10

[Lucas Holt]

New security update for MidnightBSD.

Description:

udf: Validate the full file entry length

Otherwise a corrupted file entry containing invalid extended attribute
lengths or allocation descriptor lengths can trigger an overflow when
the file entry is loaded.

Discovered by:
C Turt <ecturt at gmail.com>


Lucas Holt
Luke at FoolishGames.com
________________________________________________________
MidnightBSD.org (Free OS)
JustJournal.com (Free blogging)