[kernel-sec-discuss] r1811 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-04-15 00:22:49 +0000 (Thu, 15 Apr 2010)
New Revision: 1811

Added:
   active/CVE-2010-oom-issue
   active/CVE-2010-tty-forgets-pids
Log:
two new issues

Added: active/CVE-2010-oom-issue
===================================================================
--- active/CVE-2010-oom-issue	                        (rev 0)
+++ active/CVE-2010-oom-issue	2010-04-15 00:22:49 UTC (rev 1811)
@@ -0,0 +1,12 @@
+Candidate:
+Description:
+ oom: fix the unsafe usage of badness() in proc_oom_score()
+References:
+ http://www.openwall.com/lists/oss-security/2010/04/14/1
+Notes:
+Bugs:
+upstream: released (2.6.34-rc4) [b95c35e7]
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: N/A "introduced in 2.6.32 commit 28b83c51"
+2.6.32-squeeze-security: needed

Added: active/CVE-2010-tty-forgets-pids
===================================================================
--- active/CVE-2010-tty-forgets-pids	                        (rev 0)
+++ active/CVE-2010-tty-forgets-pids	2010-04-15 00:22:49 UTC (rev 1811)
@@ -0,0 +1,12 @@
+Candidate:
+Description:
+ tty: release_one_tty() forgets to put pids
+References:
+ http://www.openwall.com/lists/oss-security/2010/04/14/1
+Notes:
+Bugs:
+upstream: released (2.6.34-rc4) [6da8d866]
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed