[kernel-sec-discuss] r1345 - active

[Dann Frazier]

Author: dannf
Date: 2009-04-29 05:34:58 +0000 (Wed, 29 Apr 2009)
New Revision: 1345

Modified:
   active/CVE-2006-6921
   active/CVE-2007-3719
   active/CVE-2008-3275
   active/CVE-2009-0031
   active/CVE-2009-1337
   active/CVE-2009-1338
Log:
upstream + debian updates

Modified: active/CVE-2006-6921
===================================================================
--- active/CVE-2006-6921	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2006-6921	2009-04-29 05:34:58 UTC (rev 1345)
@@ -13,7 +13,7 @@
  dannf> unaware of an upstream fix
 Bugs: 
 upstream: 
-linux-2.6: needed
+linux-2.6: ignored "no upstream fix"
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix"
 2.6.24-etch-security: ignored "no upstream fix"
 2.6.26-lenny-security: ignored

Modified: active/CVE-2007-3719
===================================================================
--- active/CVE-2007-3719	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2007-3719	2009-04-29 05:34:58 UTC (rev 1345)
@@ -10,7 +10,7 @@
  jmm> check 638e13ac37a1a89473415f407cbffc1688a20fe2 
 Bugs: 
 upstream: 
-linux-2.6: 
+linux-2.6:
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix"
 2.6.24-etch-security: ignored "low priority/no upstream fix"
 2.6.26-lenny-security: ignored "low priority/no upstream fix"

Modified: active/CVE-2008-3275
===================================================================
--- active/CVE-2008-3275	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2008-3275	2009-04-29 05:34:58 UTC (rev 1345)
@@ -5,7 +5,7 @@
 Notes: 
 Bugs: 
 upstream: released (2.6.25.15, 2.6.26.2)
-linux-2.6: 
+linux-2.6: N/A
 2.6.18-etch-security: released (2.6.18.dfsg.1-22etch2) [bugfix/vfs-fix-lookup-on-deleted-directory.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.5) [bugfix/vfs-fix-lookup-on-deleted-directory.patch]
 2.6.26-lenny-security: released (2.6.26-2) [bugfix/all/stable/2.6.26.2.patch]

Modified: active/CVE-2009-0031
===================================================================
--- active/CVE-2009-0031	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2009-0031	2009-04-29 05:34:58 UTC (rev 1345)
@@ -6,7 +6,7 @@
 Notes:
 Bugs:
 upstream: released (2.6.29-rc3)
-linux-2.6: (2.6.29-1)
+linux-2.6: released (2.6.29-1)
 2.6.18-etch-security: pending (2.6.18.dfsg.1-24etch1) [bugfix/all/security-keyctl-missing-kfree.patch]
 2.6.24-etch-security: pending (2.6.24-6~etchnhalf.8etch1) [bugfix/all/security-keyctl-missing-kfree.patch]
 2.6.26-lenny-security: released (2.6.26-13lenny1) [bugfix/all/security-keyctl-missing-kfree.patch]

Modified: active/CVE-2009-1337
===================================================================
--- active/CVE-2009-1337	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2009-1337	2009-04-29 05:34:58 UTC (rev 1345)
@@ -6,8 +6,8 @@
 Ubuntu-Description:
 Notes:
 Bugs:
-upstream:
-linux-2.6:
+upstream: released (2.6.30-rc1)
+linux-2.6: needed
 2.6.18-etch-security: pending (2.6.18.dfsg.1-24etch1) [bugfix/all/exit_notify-kill-wrong-CAP_KILL-check.patch]
 2.6.24-etch-security: pending (2.6.26-6~etchnhalf.8etch1) [bugfix/all/exit_notify-kill-wrong-CAP_KILL-check.patch]
 2.6.26-lenny-security: pending (2.6.26-15lenny1) [bugfix/all/exit_notify-kill-wrong-CAP_KILL-check.patch]

Modified: active/CVE-2009-1338
===================================================================
--- active/CVE-2009-1338	2009-04-28 17:05:26 UTC (rev 1344)
+++ active/CVE-2009-1338	2009-04-29 05:34:58 UTC (rev 1345)
@@ -7,8 +7,8 @@
 Ubuntu-Description:
 Notes:
 Bugs:
-upstream:
-linux-2.6:
+upstream: released (2.6.28-rc3)
+linux-2.6: released (2.6.29-1)
 2.6.18-etch-security: N/A
 2.6.24-etch-security: pending (2.6.24-6~etchnhalf.8etch1) [bugfix/all/limit_kill_sig_-1_to_callers_namespace.patch, bugfix/all/pid-extend+fix-pid_vnr.patch]
 2.6.26-lenny-security: pending (2.6.26-15lenny1) [bugfix/all/limit_kill_sig_-1_to_callers_namespace.patch]