[kernel-sec-discuss] r1927 - active retired

Moritz Muehlenhoff jmm at alioth.debian.org
Mon Aug 23 08:58:37 UTC 2010


Author: jmm
Date: 2010-08-23 08:58:36 +0000 (Mon, 23 Aug 2010)
New Revision: 1927

Added:
   retired/CVE-2009-4895
   retired/CVE-2010-2226
Removed:
   active/CVE-2009-4895
   active/CVE-2010-2226
Log:
retire


Deleted: active/CVE-2009-4895
===================================================================
--- active/CVE-2009-4895	2010-08-23 08:57:45 UTC (rev 1926)
+++ active/CVE-2009-4895	2010-08-23 08:58:36 UTC (rev 1927)
@@ -1,14 +0,0 @@
-Candidate: CVE-2009-4895
-Description:
- tty null ptr dereference
-References:
- http://bugzilla.kernel.org/show_bug.cgi?id=14605
- http://xorl.wordpress.com/2009/11/30/linux-kernel-tty-null-pointer-dereference-race-condition/
-Notes:
- supposedly fixed in redhat kernels (see bug report above)
-Bugs:
-upstream: released (2.6.33) [80e1e823989ec44d8e35bdfddadbddcffec90424] 
-2.6.32-upstream-stable: released (2.6.32.9)
-linux-2.6: released (2.6.32-9) [bugfix/all/stable/2.6.32.9.patch]
-2.6.26-lenny-security: released (2.6.26-24lenny1) [bugfix/all/fix-race-in-tty_fasync-properly.patch]
-2.6.32-squeeze-security: released (2.6.32-9) [bugfix/all/stable/2.6.32.9.patch]

Deleted: active/CVE-2010-2226
===================================================================
--- active/CVE-2010-2226	2010-08-23 08:57:45 UTC (rev 1926)
+++ active/CVE-2010-2226	2010-08-23 08:58:36 UTC (rev 1927)
@@ -1,17 +0,0 @@
-Candidate: CVE-2010-2226
-Description:
-References:
- http://www.openwall.com/lists/oss-security/2010/06/17/1
- https://bugzilla.redhat.com/show_bug.cgi?id=605158
- http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
- http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
-Notes:
- jmm> 1817176a86352f65210139d4c794ad2d19fc6b63
-Bugs:
-upstream: released (2.6.35-rc4)
-2.6.32-upstream-stable: released (2.6.32.18)
-linux-2.6: released (2.6.32-20)
-2.6.26-lenny-security: released (2.6.26-24lenny1) [bugfix/all/xfs-prevent-swapext-from-operating-on-write-only-files.patch]
-2.6.32-squeeze-security: released (2.6.32-20)
-
-

Copied: retired/CVE-2009-4895 (from rev 1926, active/CVE-2009-4895)
===================================================================
--- retired/CVE-2009-4895	                        (rev 0)
+++ retired/CVE-2009-4895	2010-08-23 08:58:36 UTC (rev 1927)
@@ -0,0 +1,14 @@
+Candidate: CVE-2009-4895
+Description:
+ tty null ptr dereference
+References:
+ http://bugzilla.kernel.org/show_bug.cgi?id=14605
+ http://xorl.wordpress.com/2009/11/30/linux-kernel-tty-null-pointer-dereference-race-condition/
+Notes:
+ supposedly fixed in redhat kernels (see bug report above)
+Bugs:
+upstream: released (2.6.33) [80e1e823989ec44d8e35bdfddadbddcffec90424] 
+2.6.32-upstream-stable: released (2.6.32.9)
+linux-2.6: released (2.6.32-9) [bugfix/all/stable/2.6.32.9.patch]
+2.6.26-lenny-security: released (2.6.26-24lenny1) [bugfix/all/fix-race-in-tty_fasync-properly.patch]
+2.6.32-squeeze-security: released (2.6.32-9) [bugfix/all/stable/2.6.32.9.patch]


Property changes on: retired/CVE-2009-4895
___________________________________________________________________
Added: svn:mergeinfo
   + 

Copied: retired/CVE-2010-2226 (from rev 1926, active/CVE-2010-2226)
===================================================================
--- retired/CVE-2010-2226	                        (rev 0)
+++ retired/CVE-2010-2226	2010-08-23 08:58:36 UTC (rev 1927)
@@ -0,0 +1,17 @@
+Candidate: CVE-2010-2226
+Description:
+References:
+ http://www.openwall.com/lists/oss-security/2010/06/17/1
+ https://bugzilla.redhat.com/show_bug.cgi?id=605158
+ http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
+ http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
+Notes:
+ jmm> 1817176a86352f65210139d4c794ad2d19fc6b63
+Bugs:
+upstream: released (2.6.35-rc4)
+2.6.32-upstream-stable: released (2.6.32.18)
+linux-2.6: released (2.6.32-20)
+2.6.26-lenny-security: released (2.6.26-24lenny1) [bugfix/all/xfs-prevent-swapext-from-operating-on-write-only-files.patch]
+2.6.32-squeeze-security: released (2.6.32-20)
+
+


Property changes on: retired/CVE-2010-2226
___________________________________________________________________
Added: svn:mergeinfo
   + 




More information about the kernel-sec-discuss mailing list