[kernel-sec-discuss] r1862 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-06-29 02:35:48 +0000 (Tue, 29 Jun 2010)
New Revision: 1862

Added:
   active/CVE-2010-2248
   active/CVE-2010-ethtool-buffer-overflow
Log:
new issues

Added: active/CVE-2010-2248
===================================================================
--- active/CVE-2010-2248	                        (rev 0)
+++ active/CVE-2010-2248	2010-06-29 02:35:48 UTC (rev 1862)
@@ -0,0 +1,12 @@
+Candidate: CVE-2010-2248
+Description:
+ bug with remote os/2 server
+References:
+ http://openwall.com/lists/oss-security/2010/06/28/1
+Notes:
+Bugs:
+upstream: released (2.6.34) [6513a81e]
+2.6.32-upstream-stable: released (2.6.32.12) [2aa9e27e]
+linux-2.6: released (2.6.32-12) [bugfix/all/stable/2.6.32.12.patch]
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: released (2.6.32-12) [bugfix/all/stable/2.6.32.12.patch]

Added: active/CVE-2010-ethtool-buffer-overflow
===================================================================
--- active/CVE-2010-ethtool-buffer-overflow	                        (rev 0)
+++ active/CVE-2010-ethtool-buffer-overflow	2010-06-29 02:35:48 UTC (rev 1862)
@@ -0,0 +1,12 @@
+Candidate: needed?
+Description:
+ buffer overflow in ethtool
+References:
+ http://openwall.com/lists/oss-security/2010/06/29/1
+Notes:
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: N/A "vulnerability introduced in 2.6.27 commit 0853ad66"
+2.6.32-squeeze-security: needed