[kernel-sec-discuss] r1858 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-06-23 00:33:22 +0000 (Wed, 23 Jun 2010)
New Revision: 1858

Added:
   active/CVE-2010-2070
Modified:
   active/CVE-2010-2071
Log:
info/new issue

Added: active/CVE-2010-2070
===================================================================
--- active/CVE-2010-2070	                        (rev 0)
+++ active/CVE-2010-2070	2010-06-23 00:33:22 UTC (rev 1858)
@@ -0,0 +1,14 @@
+Candidate: CVE-2010-2070
+Description:
+ xen unprivileged user issue
+References:
+ http://www.openwall.com/lists/oss-security/2010/06/10/2
+Notes:
+ i couldn't find the affect ia64/xen/fault.c file, so i think
+ debian is unaffected; but i'm not really that familiar with xen
+Bugs:
+upstream:
+2.6.32-upstream-stable:
+linux-2.6:
+2.6.26-lenny-security:
+2.6.32-squeeze-security:

Modified: active/CVE-2010-2071
===================================================================
--- active/CVE-2010-2071	2010-06-22 18:10:26 UTC (rev 1857)
+++ active/CVE-2010-2071	2010-06-23 00:33:22 UTC (rev 1858)
@@ -6,8 +6,8 @@
  http://git.kernel.org/linus/2f26afba
 Notes:
 Bugs:
-upstream: pending [2f26afba]
-2.6.32-upstream-stable:
+upstream: released (2.6.35-rc3) [2f26afba]
+2.6.32-upstream-stable: needed
 linux-2.6: needed
 2.6.26-lenny-security: N/A "no btrfs"
-2.6.32-squeeze-security:
+2.6.32-squeeze-security: needed