[kernel-sec-discuss] r1596 - active retired

[Dann Frazier]

Author: dannf
Date: 2009-11-13 22:29:23 +0000 (Fri, 13 Nov 2009)
New Revision: 1596

Modified:
   active/CVE-2009-3547
   active/CVE-2009-3621
   retired/CVE-2009-2909
   retired/CVE-2009-3001
   retired/CVE-2009-3002
   retired/CVE-2009-3228
   retired/CVE-2009-3238
Log:
add patch refs

Modified: active/CVE-2009-3547
===================================================================
--- active/CVE-2009-3547	2009-11-13 22:23:24 UTC (rev 1595)
+++ active/CVE-2009-3547	2009-11-13 22:29:23 UTC (rev 1596)
@@ -17,6 +17,6 @@
 Bugs:
 pstream: released (2.6.31.6)
 linux-2.6: needed
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/fs-pipe-null-pointer-dereference.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/fs-pipe-null-pointer-dereference.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny2) [bugfix/all/fs-pipe-null-pointer-dereference.patch]

Modified: active/CVE-2009-3621
===================================================================
--- active/CVE-2009-3621	2009-11-13 22:23:24 UTC (rev 1595)
+++ active/CVE-2009-3621	2009-11-13 22:29:23 UTC (rev 1596)
@@ -8,6 +8,6 @@
 Bugs:
 upstream: released (2.6.32-rc6) [77238f2b942b38ab4e7f3aced44084493e4a8675]
 linux-2.6: needed
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/af_unix-fix-deadlock-on-connecting-to-shutdown-socket.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/af_unix-fix-deadlock-on-connecting-to-shutdown-socket.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny2) [bugfix/all/af_unix-fix-deadlock-on-connecting-to-shutdown-socket.patch]

Modified: retired/CVE-2009-2909
===================================================================
--- retired/CVE-2009-2909	2009-11-13 22:23:24 UTC (rev 1595)
+++ retired/CVE-2009-2909	2009-11-13 22:29:23 UTC (rev 1596)
@@ -9,6 +9,6 @@
 Bugs:
 upstream: released (2.6.30.9) [80a761c59bfe01de1deeb5fc66f5b7fbb3e1bfcf], pending (2.6.32-rc3) [b7058842c940ad2c08dd829b21e5c92ebe3b8758], released (2.6.31.2) [5c7fba322917ef91842676de55fba470bc2af5f3]
 linux-2.6: released (2.6.30-9) [bugfix/all/stable/2.6.30.9.patch], released (2.6.31-1)
-2.6.18-etch-security:
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/net-ax25-fix-signed-comparison-in-the-sockopt-handler.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/net-ax25-fix-signed-comparison-in-the-sockopt-handler.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny1) [bugfix/all/net-ax25-fix-signed-comparison-in-the-sockopt-handler.patch]

Modified: retired/CVE-2009-3001
===================================================================
--- retired/CVE-2009-3001	2009-11-13 22:23:24 UTC (rev 1595)
+++ retired/CVE-2009-3001	2009-11-13 22:29:23 UTC (rev 1596)
@@ -14,6 +14,6 @@
 Bugs:
 upstream: released (2.6.31-rc8) [28e9fc592cb8c7a43e4d3147b38be6032a0e81bc]
 linux-2.6: released (2.6.31-1~experimental.1)
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/net-llc-zero-sockaddr_llc-struct.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/net-llc-zero-sockaddr_llc-struct.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny1) [bugfix/all/net-llc-zero-sockaddr_llc-struct.patch]

Modified: retired/CVE-2009-3002
===================================================================
--- retired/CVE-2009-3002	2009-11-13 22:23:24 UTC (rev 1595)
+++ retired/CVE-2009-3002	2009-11-13 22:29:23 UTC (rev 1596)
@@ -20,6 +20,6 @@
 Bugs:
 upstream: released (2.6.31-rc7) [09384dfc76e526c3993c09c42e016372dc9dd22c,17ac2e9c58b69a1e25460a568eae1b0dc0188c25,80922bbb12a105f858a8f0abb879cb4302d0ecaa,e84b90ae5eb3c112d1f208964df1d8156a538289,f6b97b29513950bfbf621a83d85b6f86b39ec8db]
 linux-2.6: released (2.6.30-7) [bugfix/all/stable/2.6.30.6.patch]
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/irda-fix-irda_getname-leak.patch, bugfix/all/rose-fix-rose_getname-leak.patch, bugfix/all/econet-fix-econet_getname-leak.patch, bugfix/all/netrom-fix-nr_getname-leak.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/irda-fix-irda_getname-leak.patch, bugfix/all/rose-fix-rose_getname-leak.patch, bugfix/all/econet-fix-econet_getname-leak.patch, bugfix/all/netrom-fix-nr_getname-leak.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny1) [bugfix/all/irda-fix-irda_getname-leak.patch, bugfix/all/rose-fix-rose_getname-leak.patch, bugfix/all/econet-fix-econet_getname-leak.patch, bugfix/all/can-fix-raw_getname-leak.patch, bugfix/all/netrom-fix-nr_getname-leak.patch]

Modified: retired/CVE-2009-3228
===================================================================
--- retired/CVE-2009-3228	2009-11-13 22:23:24 UTC (rev 1595)
+++ retired/CVE-2009-3228	2009-11-13 22:29:23 UTC (rev 1596)
@@ -22,6 +22,6 @@
 Bugs:
 upstream: released (2.6.31)
 linux-2.6: released (2.6.31-1)
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/tc-fix-pad-leak.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/tc-fix-pad-leak.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny2) [bugfix/all/tc-fix-pad-leak.patch]

Modified: retired/CVE-2009-3238
===================================================================
--- retired/CVE-2009-3238	2009-11-13 22:23:24 UTC (rev 1595)
+++ retired/CVE-2009-3238	2009-11-13 22:29:23 UTC (rev 1596)
@@ -15,6 +15,6 @@
 Bugs:
 upstream: released (2.6.30) [8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02]
 linux-2.6: released (2.6.30-1)
-2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1)
+2.6.18-etch-security: released (2.6.18.dfsg.1-26etch1) [bugfix/all/random-make-get_random_int-more-random.patch]
 2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch1) [bugfix/all/random-make-get_random_int-more-random.patch]
 2.6.26-lenny-security: released (2.6.26-19lenny2) [bugfix/all/random-make-get_random_int-more-random.patch]