[kernel-sec-discuss] r1640 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-12-07 15:51:53 +0000 (Mon, 07 Dec 2009)
New Revision: 1640

Added:
   active/CVE-2009-1298
Removed:
   active/CVE-2009-ipv4-dos
Modified:
   active/CVE-2009-mmap_min_addr-bypass
Log:
cve id assigned

Copied: active/CVE-2009-1298 (from rev 1639, active/CVE-2009-ipv4-dos)
===================================================================
--- active/CVE-2009-1298	                        (rev 0)
+++ active/CVE-2009-1298	2009-12-07 15:51:53 UTC (rev 1640)
@@ -0,0 +1,14 @@
+Candidate:
+Description:
+ ipv4 denial-of-sevice
+References:
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=bbf31bf18d34caa87dd01f08bf713635593697f2
+Notes:
+Bugs:
+upstream: released (2.6.32) [bbf31bf1]
+2.6.31-upstream-stable:
+linux-2.6: pending (2.6.32-1)
+2.6.18-etch-security: N/A "introduced in 2.6.29 commit 2bad35b7"
+2.6.24-etch-security: N/A "introduced in 2.6.29 commit 2bad35b7"
+2.6.26-lenny-security: N/A "introduced in 2.6.29 commit 2bad35b7"
+2.6.32-squeeze-security: pending (2.6.32-1)

Deleted: active/CVE-2009-ipv4-dos
===================================================================
--- active/CVE-2009-ipv4-dos	2009-12-07 06:18:57 UTC (rev 1639)
+++ active/CVE-2009-ipv4-dos	2009-12-07 15:51:53 UTC (rev 1640)
@@ -1,14 +0,0 @@
-Candidate:
-Description:
- ipv4 denial-of-sevice
-References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=bbf31bf18d34caa87dd01f08bf713635593697f2
-Notes:
-Bugs:
-upstream: released (2.6.32) [bbf31bf1]
-2.6.31-upstream-stable:
-linux-2.6: pending (2.6.32-1)
-2.6.18-etch-security: N/A "introduced in 2.6.29 commit 2bad35b7"
-2.6.24-etch-security: N/A "introduced in 2.6.29 commit 2bad35b7"
-2.6.26-lenny-security: N/A "introduced in 2.6.29 commit 2bad35b7"
-2.6.32-squeeze-security: pending (2.6.32-1)

Modified: active/CVE-2009-mmap_min_addr-bypass
===================================================================
--- active/CVE-2009-mmap_min_addr-bypass	2009-12-07 06:18:57 UTC (rev 1639)
+++ active/CVE-2009-mmap_min_addr-bypass	2009-12-07 15:51:53 UTC (rev 1640)
@@ -1,6 +1,6 @@
 Candidate:
 Description:
- processes with CAP_SYS_RAWIO could bypass mmapm_min_addr
+ processes with CAP_SYS_RAWIO could bypass selinux mmapm_min_addr
 References:
  http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;f=security/min_addr.c;fp=security/min_addr.c;h=fc43c9d37084599056680e55c5e8c38491b117ba;hp=c844eed7915d0d270c058c16d6b3db40ffa576d0;hb=83fdbfbfe6e7e8906e3a3f8f6bc074d887e92109;hpb=d9b2c4d0b03c721808c0d259e43a27f1e80205bc
 Notes: