[kernel-sec-discuss] r2047 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2010-11-25 15:38:35 +0000 (Thu, 25 Nov 2010)
New Revision: 2047

Added:
   active/CVE-2010-4248
   active/CVE-2010-4295
Log:
two new issues


Added: active/CVE-2010-4248
===================================================================
--- active/CVE-2010-4248	                        (rev 0)
+++ active/CVE-2010-4248	2010-11-25 15:38:35 UTC (rev 2047)
@@ -0,0 +1,10 @@
+Candidate: CVE-2010-4248
+Description: posix-cpu-timers: workaround to suppress the problems with mt exec
+References:
+Notes:
+Bugs:
+upstream: released (2.6.37-rc2) [e0a70217107e6f9844628120412cb27bb4cea194]
+2.6.32-upstream-stable:
+linux-2.6:
+2.6.26-lenny-security:
+2.6.32-squeeze-security:

Added: active/CVE-2010-4295
===================================================================
--- active/CVE-2010-4295	                        (rev 0)
+++ active/CVE-2010-4295	2010-11-25 15:38:35 UTC (rev 2047)
@@ -0,0 +1,15 @@
+Candidate: CVE-2010-4295
+Description: unix socket local dos
+Notes:
+References:
+ > From Eugene Teo:
+ > Reproducer: http://lkml.org/lkml/2010/11/23/395
+ > Partial fix: http://lkml.org/lkml/2010/11/23/450
+ > Reference: https://bugzilla.redhat.com/show_bug.cgi?id=656756
+Notes:
+Bugs:
+upstream:
+2.6.32-upstream-stable:
+linux-2.6:
+2.6.26-lenny-security:
+2.6.32-squeeze-security: