[kernel-sec-discuss] r1049 - active

[dannf at alioth.debian.org]

Author: dannf
Date: 2007-12-04 22:03:35 +0000 (Tue, 04 Dec 2007)
New Revision: 1049

Modified:
   active/CVE-2007-6063
Log:
add description, upstream, and etch status

Modified: active/CVE-2007-6063
===================================================================
--- active/CVE-2007-6063	2007-12-04 21:51:42 UTC (rev 1048)
+++ active/CVE-2007-6063	2007-12-04 22:03:35 UTC (rev 1049)
@@ -1,12 +1,18 @@
 Candidate: CVE-2007-6063
 Description: 
+ Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel
+ 2.6.23 allows local users to have an unknown impact via a crafted argument to
+ the isdn_ioctl function.
 References: 
+ http://bugzilla.kernel.org/show_bug.cgi?id=9416
+ http://www.securityfocus.com/bid/26605
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0f13864e5b24d9cbe18d125d41bfa4b726a82e40
 Ubuntu-Description: 
 Notes: 
 Bugs: 
-upstream: 
+upstream: released (2.6.24-rc4) [0f13864e5b24d9cbe18d125d41bfa4b726a82e40]
 linux-2.6: 
-2.6.18-etch-security: 
+2.6.18-etch-security: pending (2.6.18.dfsg.1-13etch6) [bugfix/isdn-net-overflow.patch]
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: