[kernel-sec-discuss] r2253 - active
Moritz Muehlenhoff
jmm at alioth.debian.org
Wed Apr 13 16:49:24 UTC 2011
Author: jmm
Date: 2011-04-13 16:49:20 +0000 (Wed, 13 Apr 2011)
New Revision: 2253
Modified:
active/CVE-2010-3865
active/CVE-2010-3875
active/CVE-2010-3876
active/CVE-2010-3877
active/CVE-2010-3880
active/CVE-2010-4342
active/CVE-2010-4529
active/CVE-2010-4565
active/CVE-2011-0711
active/CVE-2011-1078
active/CVE-2011-1079
active/CVE-2011-1080
active/CVE-2011-1173
Log:
first round of issues pending for next stable
Modified: active/CVE-2010-3865
===================================================================
--- active/CVE-2010-3865 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-3865 2011-04-13 16:49:20 UTC (rev 2253)
@@ -11,7 +11,7 @@
bwh> Auto-loading will be disabled in 2.6.32-28.
Bugs:
upstream: released (2.6.37-rc1) [1b1f693d7ad6d193862dcb1118540a030c5e761f]
-2.6.32-upstream-stable: needed?
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.37-1)
2.6.26-lenny-security: N/A (Vulnerable code not present)
2.6.32-squeeze-security: released (2.6.32-31)
Modified: active/CVE-2010-3875
===================================================================
--- active/CVE-2010-3875 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-3875 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.37-rc2) [fe10ae5]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/CVE-2010-3875.patch]
2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/net-ax25-fix-information-leak-to-userland.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/CVE-2010-3875.patch]
Modified: active/CVE-2010-3876
===================================================================
--- active/CVE-2010-3876 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-3876 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.37-rc2) [6728664]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/CVE-2010-3876.patch]
2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/net-packet-fix-information-leak-to-userland.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/CVE-2010-3876.patch]
Modified: active/CVE-2010-3877
===================================================================
--- active/CVE-2010-3877 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-3877 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.37-rc2) [88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/CVE-2010-3877.patch]
2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/net-tipc-fix-information-leak-to-userland.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/CVE-2010-3877.patch]
Modified: active/CVE-2010-3880
===================================================================
--- active/CVE-2010-3880 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-3880 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.37-rc2) [22e76c8]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/CVE-2010-3880.patch]
2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/inet_diag-make-sure-we-actually-run-the-same-bytecode-we-audited.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/CVE-2010-3880.patch]
Modified: active/CVE-2010-4342
===================================================================
--- active/CVE-2010-4342 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-4342 2011-04-13 16:49:20 UTC (rev 2253)
@@ -6,7 +6,7 @@
Notes:
Bugs:
upstream: released (2.6.37) [4e085e76cbe558b79b54cbab772f61185879bc64]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/CVE-2010-4342.patch]
2.6.26-lenny-security: released (2.6.26-26lenny2) [bugfix/all/econet-fix-crash-in-aun_incoming.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/CVE-2010-4342.patch]
Modified: active/CVE-2010-4529
===================================================================
--- active/CVE-2010-4529 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-4529 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.37) [fdac1e0697356ac212259f2147aa60c72e334861]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.32-30) [bugfix/all/irda-prevent-integer-underflow-in-IRLMP_ENUMDEVICES.patch]
2.6.26-lenny-security: released (2.6.26-26lenny2) [bugfix/all/irda-prevent-integer-underflow-in-IRLMP_ENUMDEVICES.patch]
2.6.32-squeeze-security: released (2.6.32-30) [bugfix/all/irda-prevent-integer-underflow-in-IRLMP_ENUMDEVICES.patch]
Modified: active/CVE-2010-4565
===================================================================
--- active/CVE-2010-4565 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2010-4565 2011-04-13 16:49:20 UTC (rev 2253)
@@ -4,7 +4,7 @@
Notes:
Bugs:
upstream: released (2.6.37) [9f260e0efa4766e56d0ac14f1aeea6ee5eb8fe83]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: released (2.6.37-1)
2.6.26-lenny-security: released (2.6.26-26lenny2) [bugfix/all/can-use-inode-instead-of-kernel-address-for-proc-file.patch]
2.6.32-squeeze-security: pending (2.6.32-31) [bugfix/all/can-use-inode-instead-of-kernel-address-for-proc-file.patch]
Modified: active/CVE-2011-0711
===================================================================
--- active/CVE-2011-0711 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2011-0711 2011-04-13 16:49:20 UTC (rev 2253)
@@ -4,8 +4,8 @@
https://patchwork.kernel.org/patch/546491/
Notes:
Bugs:
-upstream: released (2.6.38-rc7) [3a3675b7f23f83ca8c67c9c2b6edf707fd28d1ba]
-2.6.32-upstream-stable: needed
-linux-2.6: needed
+upstream: released (2.6.38-rc7) [c4d0c3b097f7584772316ee4d64a09fe0e4ddfca]
+2.6.32-upstream-stable: pending (2.6.32.37)
+linux-2.6: released (2.6.38-1)
2.6.26-lenny-security: needed
2.6.32-squeeze-security: pending (2.6.32.32) [bugfix/all/xfs-prevent-leaking-uninitialized-stack-memory-in-FSGEOMETRY_V1.patch]
Modified: active/CVE-2011-1078
===================================================================
--- active/CVE-2011-1078 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2011-1078 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.39-rc1) [c4c896e1471aec3b004a693c689f60be3b17ac86]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: needed
2.6.26-lenny-security: needed
2.6.32-squeeze-security: pending (2.6.32-32) [bugfix/all/bluetooth-sco-fix-information-leak-to-userspace.patch]
Modified: active/CVE-2011-1079
===================================================================
--- active/CVE-2011-1079 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2011-1079 2011-04-13 16:49:20 UTC (rev 2253)
@@ -5,7 +5,7 @@
Notes:
Bugs:
upstream: released (2.6.39-rc1) [43629f8f5ea32a998d06d1bb41eefa0e821ff573]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: needed
2.6.26-lenny-security: needed
2.6.32-squeeze-security: pending (2.6.32-32) [bugfix/all/bluetooth-bnep-fix-buffer-overflow.patch]
Modified: active/CVE-2011-1080
===================================================================
--- active/CVE-2011-1080 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2011-1080 2011-04-13 16:49:20 UTC (rev 2253)
@@ -4,7 +4,7 @@
Notes:
Bugs:
upstream: released (2.6.39-rc1) [d846f71195d57b0bbb143382647c2c6638b04c5a]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: needed
2.6.26-lenny-security: needed
2.6.32-squeeze-security: pending (2.6.32-32) [bugfix/all/bridge-netfilter-fix-information-leak.patch]
Modified: active/CVE-2011-1173
===================================================================
--- active/CVE-2011-1173 2011-04-13 15:05:16 UTC (rev 2252)
+++ active/CVE-2011-1173 2011-04-13 16:49:20 UTC (rev 2253)
@@ -6,7 +6,7 @@
Notes:
Bugs:
upstream: released (2.6.39-rc1) [67c5c6cb8129c595f21e88254a3fc6b3b841ae8e]
-2.6.32-upstream-stable: needed
+2.6.32-upstream-stable: pending (2.6.32.37)
linux-2.6: needed
2.6.26-lenny-security: needed
2.6.32-squeeze-security: pending (2.6.32-32) [bugfix/all/econet-4-byte-infoleak-to-the-network.patch]
More information about the kernel-sec-discuss
mailing list