[kernel-sec-discuss] r1920 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-08-20 03:59:21 +0000 (Fri, 20 Aug 2010)
New Revision: 1920

Added:
   active/CVE-2010-2942
   active/CVE-2010-2943
Removed:
   active/CVE-2010-net-sched-infoleak
   active/CVE-2010-xfs-infoleak
Log:
cves assigned

Copied: active/CVE-2010-2942 (from rev 1919, active/CVE-2010-net-sched-infoleak)
===================================================================
--- active/CVE-2010-2942	                        (rev 0)
+++ active/CVE-2010-2942	2010-08-20 03:59:21 UTC (rev 1920)
@@ -0,0 +1,12 @@
+Candidate: needed
+Description:
+ 32-bits of kernel memory are leaked to user land via tc dump
+References:
+ http://www.openwall.com/lists/oss-security/2010/08/18/1
+Notes:
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed

Copied: active/CVE-2010-2943 (from rev 1919, active/CVE-2010-xfs-infoleak)
===================================================================
--- active/CVE-2010-2943	                        (rev 0)
+++ active/CVE-2010-2943	2010-08-20 03:59:21 UTC (rev 1920)
@@ -0,0 +1,14 @@
+Candidate: needed
+Description:
+ xfs leak due to filehandle conversion issue
+References:
+ http://www.openwall.com/lists/oss-security/2010/08/18/2
+Notes:
+ also need regression fix (not commited yet):
+ http://oss.sgi.com/archives/xfs/2010-08/msg00179.html
+Bugs:
+upstream: release (2.6.35) [7dce11db,7124fe0a,1920779e,7b6259e7]
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed

Deleted: active/CVE-2010-net-sched-infoleak
===================================================================
--- active/CVE-2010-net-sched-infoleak	2010-08-20 03:55:08 UTC (rev 1919)
+++ active/CVE-2010-net-sched-infoleak	2010-08-20 03:59:21 UTC (rev 1920)
@@ -1,12 +0,0 @@
-Candidate: needed
-Description:
- 32-bits of kernel memory are leaked to user land via tc dump
-References:
- http://www.openwall.com/lists/oss-security/2010/08/18/1
-Notes:
-Bugs:
-upstream: needed
-2.6.32-upstream-stable: needed
-linux-2.6: needed
-2.6.26-lenny-security: needed
-2.6.32-squeeze-security: needed

Deleted: active/CVE-2010-xfs-infoleak
===================================================================
--- active/CVE-2010-xfs-infoleak	2010-08-20 03:55:08 UTC (rev 1919)
+++ active/CVE-2010-xfs-infoleak	2010-08-20 03:59:21 UTC (rev 1920)
@@ -1,14 +0,0 @@
-Candidate: needed
-Description:
- xfs leak due to filehandle conversion issue
-References:
- http://www.openwall.com/lists/oss-security/2010/08/18/2
-Notes:
- also need regression fix (not commited yet):
- http://oss.sgi.com/archives/xfs/2010-08/msg00179.html
-Bugs:
-upstream: release (2.6.35) [7dce11db,7124fe0a,1920779e,7b6259e7]
-2.6.32-upstream-stable: needed
-linux-2.6: needed
-2.6.26-lenny-security: needed
-2.6.32-squeeze-security: needed