[kernel-sec-discuss] r903 - active

[dannf at alioth.debian.org]

Author: dannf
Date: 2007-08-07 06:07:39 +0000 (Tue, 07 Aug 2007)
New Revision: 903

Modified:
   active/CVE-2007-3380
Log:
may have dismissed etch's vulnerability too quickly

Modified: active/CVE-2007-3380
===================================================================
--- active/CVE-2007-3380	2007-08-07 05:52:47 UTC (rev 902)
+++ active/CVE-2007-3380	2007-08-07 06:07:39 UTC (rev 903)
@@ -6,10 +6,12 @@
  A flaw was discovered in the cluster manager.  A remote attacker could
  connect to the DLM port and block further DLM operations.
 Notes: 
+ dannf> Debian's 2.6.18 isn't affected, but the redhat-cluster package
+        may be.
 Bugs: 
 upstream: 
 linux-2.6: 
-2.6.18-etch-security: N/A
+2.6.18-etch-security: 
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: released (2.6.15-28.57)