[kernel-sec-discuss] r1619 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2009-11-27 14:40:09 +0000 (Fri, 27 Nov 2009)
New Revision: 1619

Modified:
   active/CVE-2009-3889
   active/CVE-2009-3939
Log:
the megarais sysfs issues don't affect 2.6.18


Modified: active/CVE-2009-3889
===================================================================
--- active/CVE-2009-3889	2009-11-25 19:19:58 UTC (rev 1618)
+++ active/CVE-2009-3889	2009-11-27 14:40:09 UTC (rev 1619)
@@ -11,6 +11,6 @@
 Bugs:
 upstream: released (2.6.27) [66dca9b8]
 linux-2.6: released (2.6.27-1)
-2.6.18-etch-security:
+2.6.18-etch-security: N/A (Vulnerable code not present)
 2.6.24-etch-security:
 2.6.26-lenny-security: pending (2.6.26-21) [bugfix/all/megaraid_sas-fix-sysfs-dbg_lvl-permissions.patch]

Modified: active/CVE-2009-3939
===================================================================
--- active/CVE-2009-3939	2009-11-25 19:19:58 UTC (rev 1618)
+++ active/CVE-2009-3939	2009-11-27 14:40:09 UTC (rev 1619)
@@ -6,10 +6,11 @@
 References:
  http://www.openwall.com/lists/oss-security/2009/11/13/1
 Notes:
+ jmm> Introduced in ad84db2e2e1817bb8a29e7c9108eb66bf023d99f
 Bugs:
 upstream:
 2.6.31-upstream-stable:
 linux-2.6:
-2.6.18-etch-security:
+2.6.18-etch-security: N/A (Vulnerable code not present)
 2.6.24-etch-security:
 2.6.26-lenny-security: ignored "not committed upstream yet"