[kernel-sec-discuss] r1996 - active

Fri Oct 15 09:12:19 UTC 2010

Author: jmm
Date: 2010-10-15 09:12:07 +0000 (Fri, 15 Oct 2010)
New Revision: 1996

Modified:
   active/CVE-2010-1436
   active/CVE-2010-2653
   active/CVE-2010-2942
   active/CVE-2010-2962
   active/CVE-2010-3084
   active/CVE-2010-3310
   active/CVE-2010-3437
   active/CVE-2010-3442
   active/CVE-2010-3477
   active/CVE-2010-3705
Log:
record latest linux-2.6 upload


Modified: active/CVE-2010-1436
===================================================================

--- active/CVE-2010-1436	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-1436	2010-10-15 09:12:07 UTC (rev 1996)
@@ -6,6 +6,6 @@
 Bugs:
 upstream: released (2.6.35-rc1) [7e619bc3e]
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/gfs2-clean-up-gfs_adjust_quota-and_do_glock.patch, bugfix/all/gfs2-fix-writing-to-non-page-aligned-gfs2_quota-structures.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/gfs2-clean-up-gfs_adjust_quota-and_do_glock.patch, bugfix/all/gfs2-fix-writing-to-non-page-aligned-gfs2_quota-structures.patch]
 2.6.26-lenny-security: needed
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/gfs2-clean-up-gfs_adjust_quota-and_do_glock.patch, bugfix/all/gfs2-fix-writing-to-non-page-aligned-gfs2_quota-structures.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/gfs2-clean-up-gfs_adjust_quota-and_do_glock.patch, bugfix/all/gfs2-fix-writing-to-non-page-aligned-gfs2_quota-structures.patch]

Modified: active/CVE-2010-2653
===================================================================
--- active/CVE-2010-2653	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-2653	2010-10-15 09:12:07 UTC (rev 1996)
@@ -10,6 +10,6 @@
 Bugs:
 upstream: released (2.6.34-rc2) [e74d098c]
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove.patch, bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove-2.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove.patch, bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove-2.patch]
 2.6.26-lenny-security: "needs port"
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove.patch, bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove-2.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove.patch, bugfix/all/hvc_console-fix-race-between-hvc_close-and-hvc_remove-2.patch]

Modified: active/CVE-2010-2942
===================================================================
--- active/CVE-2010-2942	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-2942	2010-10-15 09:12:07 UTC (rev 1996)
@@ -9,6 +9,6 @@
 Bugs:
 upstream: released (2.6.36-rc3) [1c40be1]
 2.6.32-upstream-stable:
-linux-2.6: pending (2.6.32-25) [bugfix/all/act_nat-use-stack-variable.patch, bugfix/all/net-sched-fix-some-memory-leaks.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/act_nat-use-stack-variable.patch, bugfix/all/net-sched-fix-some-memory-leaks.patch]
 2.6.26-lenny-security: released (2.6.26-25) [bugfix/all/net-sched-fix-some-kernel-memory-leaks.patch]
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/act_nat-use-stack-variable.patch, bugfix/all/net-sched-fix-some-memory-leaks.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/act_nat-use-stack-variable.patch, bugfix/all/net-sched-fix-some-memory-leaks.patch]

Modified: active/CVE-2010-2962
===================================================================
--- active/CVE-2010-2962	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-2962	2010-10-15 09:12:07 UTC (rev 1996)
@@ -5,6 +5,6 @@
 Bugs:
 upstream: released  (2.6.36-rc7) [ce9d419dbecc292cc3e06e8b1d6d123d3fa813a4]
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/drm-i915-sanity-check-pread+pwrite.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/drm-i915-sanity-check-pread+pwrite.patch]
 2.6.26-lenny-security: N/A
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/drm-i915-sanity-check-pread+pwrite.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/drm-i915-sanity-check-pread+pwrite.patch]

Modified: active/CVE-2010-3084
===================================================================
--- active/CVE-2010-3084	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3084	2010-10-15 09:12:07 UTC (rev 1996)
@@ -7,6 +7,6 @@
 Bugs:
 upstream: released (2.6.36-rc4) 
 2.6.32-upstream-stable:
-linux-2.6: pending (2.6.32-25) [bugfix/all/niu-fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/niu-fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.patch]
 2.6.26-lenny-security:
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/niu-fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/niu-fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.patch]

Modified: active/CVE-2010-3310
===================================================================
--- active/CVE-2010-3310	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3310	2010-10-15 09:12:07 UTC (rev 1996)
@@ -9,6 +9,6 @@
 Bugs:
 upstream: released (2.6.36-rc6)
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/rose-fix-signedness-issues-wrt-digi-count.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/rose-fix-signedness-issues-wrt-digi-count.patch]
 2.6.26-lenny-security: needed
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/rose-fix-signedness-issues-wrt-digi-count.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/rose-fix-signedness-issues-wrt-digi-count.patch]

Modified: active/CVE-2010-3437
===================================================================
--- active/CVE-2010-3437	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3437	2010-10-15 09:12:07 UTC (rev 1996)
@@ -22,6 +22,6 @@
 Bugs:
 upstream: released (2.6.36-rc6)
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/fix-pktcdvd-ioctl-dev_minor-range-check.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/fix-pktcdvd-ioctl-dev_minor-range-check.patch]
 2.6.26-lenny-security: needed
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/fix-pktcdvd-ioctl-dev_minor-range-check.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/fix-pktcdvd-ioctl-dev_minor-range-check.patch]

Modified: active/CVE-2010-3442
===================================================================
--- active/CVE-2010-3442	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3442	2010-10-15 09:12:07 UTC (rev 1996)
@@ -18,6 +18,6 @@
 Bugs:
 upstream: needed
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/alsa-prevent-heap-corruption-in-snd_ctl_new.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/alsa-prevent-heap-corruption-in-snd_ctl_new.patch]
 2.6.26-lenny-security:
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/alsa-prevent-heap-corruption-in-snd_ctl_new.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/alsa-prevent-heap-corruption-in-snd_ctl_new.patch]

Modified: active/CVE-2010-3477
===================================================================
--- active/CVE-2010-3477	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3477	2010-10-15 09:12:07 UTC (rev 1996)
@@ -7,6 +7,6 @@
 Bugs:
 upstream: released (2.6.36-rc4) [0f04cfd0]
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/net-sched-fix-kernel-leak-in-act_police.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/net-sched-fix-kernel-leak-in-act_police.patch]
 2.6.26-lenny-security: pending (2.6.26-25lenny2) [bugfix/all/net-sched-fix-kernel-leak-in-act_police.patch]
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/net-sched-fix-kernel-leak-in-act_police.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/net-sched-fix-kernel-leak-in-act_police.patch]

Modified: active/CVE-2010-3705
===================================================================
--- active/CVE-2010-3705	2010-10-14 07:05:35 UTC (rev 1995)
+++ active/CVE-2010-3705	2010-10-15 09:12:07 UTC (rev 1996)
@@ -8,6 +8,6 @@
 Bugs:
 upstream: needed
 2.6.32-upstream-stable: needed
-linux-2.6: pending (2.6.32-25) [bugfix/all/sctp-fix-out-of-bounds-reading-in-sctp_assoc_get_hmac.patch]
+linux-2.6: released (2.6.32-25) [bugfix/all/sctp-fix-out-of-bounds-reading-in-sctp_assoc_get_hmac.patch]
 2.6.26-lenny-security: needed
-2.6.32-squeeze-security: pending (2.6.32-25) [bugfix/all/sctp-fix-out-of-bounds-reading-in-sctp_assoc_get_hmac.patch]
+2.6.32-squeeze-security: released (2.6.32-25) [bugfix/all/sctp-fix-out-of-bounds-reading-in-sctp_assoc_get_hmac.patch]


