[kernel-sec-discuss] r877 - active

[rtg-guest at alioth.debian.org]

Author: rtg-guest
Date: 2007-07-03 19:35:30 +0000 (Tue, 03 Jul 2007)
New Revision: 877

Modified:
   active/CVE-2006-6060
   active/CVE-2006-6128
   active/CVE-2006-6921
   active/CVE-2006-7051
   active/CVE-2006-7203
   active/CVE-2007-0005
   active/CVE-2007-1000
   active/CVE-2007-1353
   active/CVE-2007-1861
   active/CVE-2007-2242
   active/CVE-2007-2453
   active/CVE-2007-2480
   active/CVE-2007-2525
   active/CVE-2007-2875
   active/CVE-2007-2876
   active/CVE-2007-2878
   active/CVE-2007-3104
Log:
Edgy CVE status updates

Modified: active/CVE-2006-6060
===================================================================
--- active/CVE-2006-6060	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2006-6060	2007-07-03 19:35:30 UTC (rev 877)
@@ -19,5 +19,5 @@
 2.6.8-sarge-security: released (2.6.8-16sarge7) [__find_get_block_slow-race.dpatch]
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: N/A - already applied.
 2.6.20-feisty-security: N/A

Modified: active/CVE-2006-6128
===================================================================
--- active/CVE-2006-6128	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2006-6128	2007-07-03 19:35:30 UTC (rev 877)
@@ -21,4 +21,4 @@
 2.6.8-sarge-security: ignored (2.6.8-16sarge7)
 2.4.27-sarge-security: ignored (2.4.27-10sarge6)
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: ignored - no upstream fix.

Modified: active/CVE-2006-6921
===================================================================
--- active/CVE-2006-6921	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2006-6921	2007-07-03 19:35:30 UTC (rev 877)
@@ -18,5 +18,5 @@
 2.6.8-sarge-security: ignored (2.6.8-16sarge7)
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: ignored
-2.6.17-edgy-security: ignored
+2.6.17-edgy-security: ignored - no upstream patch
 2.6.20-feisty-security: ignored

Modified: active/CVE-2006-7051
===================================================================
--- active/CVE-2006-7051	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2006-7051	2007-07-03 19:35:30 UTC (rev 877)
@@ -24,5 +24,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: needed - no upstream patch
 2.6.20-feisty: needed

Modified: active/CVE-2006-7203
===================================================================
--- active/CVE-2006-7203	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2006-7203	2007-07-03 19:35:30 UTC (rev 877)
@@ -16,5 +16,5 @@
 2.6.8-sarge-security: pending (2.6.8-17sarge1) [compat_sys_mount-NULL-data_page.dpatch]
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - b47f37617947e31bb19441e18714683e4ec86820
 2.6.20-feisty-security: N/A

Modified: active/CVE-2007-0005
===================================================================
--- active/CVE-2007-0005	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-0005	2007-07-03 19:35:30 UTC (rev 877)
@@ -16,5 +16,5 @@
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - 059819a41d4331316dd8ddcf977a24ab338f4300
 2.6.20-feisty-security: N/A

Modified: active/CVE-2007-1000
===================================================================
--- active/CVE-2007-1000	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-1000	2007-07-03 19:35:30 UTC (rev 877)
@@ -16,5 +16,5 @@
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - c6a7d4a50efdc7ebd50158bcd57c981e85bd31f7
 2.6.20-feisty-security: N/A

Modified: active/CVE-2007-1353
===================================================================
--- active/CVE-2007-1353	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-1353	2007-07-03 19:35:30 UTC (rev 877)
@@ -22,5 +22,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: pending (2.4.27-10sarge6) [244_bluetooth-l2cap-hci-info-leaks.diff]
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - 6529b3249b30c826d8ab991d839c6cb4e952c1ed
 2.6.20-feisty-security: released (linux-source-2.6.20-16.29)

Modified: active/CVE-2007-1861
===================================================================
--- active/CVE-2007-1861	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-1861	2007-07-03 19:35:30 UTC (rev 877)
@@ -14,5 +14,5 @@
 2.4.27-sarge-security: N/A
 2.6.12-breezy-security: N/A
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - a0819ea9cc4116f4d127c4e015ce146109be1f4b
 2.6.20-feisty-security: N/A

Modified: active/CVE-2007-2242
===================================================================
--- active/CVE-2007-2242	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2242	2007-07-03 19:35:30 UTC (rev 877)
@@ -26,5 +26,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - fee89820efa8e3479b39149dcfb2b1bccdaadedc
 2.6.20-feisty-security: released (linux-source-2.6.20-16.28)

Modified: active/CVE-2007-2453
===================================================================
--- active/CVE-2007-2453	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2453	2007-07-03 19:35:30 UTC (rev 877)
@@ -17,5 +17,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: needed - ugly and invasive.
 2.6.20-feisty-security: released (linux-source-2.6.20-16.29)

Modified: active/CVE-2007-2480
===================================================================
--- active/CVE-2007-2480	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2480	2007-07-03 19:35:30 UTC (rev 877)
@@ -15,5 +15,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: needed - needs backport.
 2.6.20-feisty-security: needed

Modified: active/CVE-2007-2525
===================================================================
--- active/CVE-2007-2525	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2525	2007-07-03 19:35:30 UTC (rev 877)
@@ -10,5 +10,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: 
-2.6.17-edgy-security: 
+2.6.17-edgy-security: released 123623f9ad4d9bbe55c03b33ce79123e948b107f
 2.6.20-feisty-security: 

Modified: active/CVE-2007-2875
===================================================================
--- active/CVE-2007-2875	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2875	2007-07-03 19:35:30 UTC (rev 877)
@@ -14,5 +14,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - 1448fa0c7be21a3c6c31b20d19a8ecfafdfea143
 2.6.20-feisty-security: needed

Modified: active/CVE-2007-2876
===================================================================
--- active/CVE-2007-2876	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2876	2007-07-03 19:35:30 UTC (rev 877)
@@ -14,5 +14,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: needed
-2.6.17-edgy-security: needed
+2.6.17-edgy-security: released - 71405ef45b6a5da5419cf4580db7fe9666a63774
 2.6.20-feisty-security: needed

Modified: active/CVE-2007-2878
===================================================================
--- active/CVE-2007-2878	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-2878	2007-07-03 19:35:30 UTC (rev 877)
@@ -20,5 +20,5 @@
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: 
-2.6.17-edgy-security: 
+2.6.17-edgy-security: released - 6dbbec837f43196339b1638dc799d898fcba9302
 2.6.20-feisty-security: 

Modified: active/CVE-2007-3104
===================================================================
--- active/CVE-2007-3104	2007-06-30 17:45:16 UTC (rev 876)
+++ active/CVE-2007-3104	2007-07-03 19:35:30 UTC (rev 877)
@@ -10,5 +10,5 @@
 2.6.8-sarge-security: 
 2.4.27-sarge-security: 
 2.6.15-dapper-security: 
-2.6.17-edgy-security: 
+2.6.17-edgy-security: needed - Gotta dig out the RedHat fix.
 2.6.20-feisty-security: