[kernel-sec-discuss] r2262 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-04-18 12:43:57 +0000 (Mon, 18 Apr 2011)
New Revision: 2262

Added:
   active/CVE-2011-1493
Log:
new ROSE issue


Added: active/CVE-2011-1493
===================================================================
--- active/CVE-2011-1493	                        (rev 0)
+++ active/CVE-2011-1493	2011-04-18 12:43:57 UTC (rev 2262)
@@ -0,0 +1,11 @@
+Candidate: CVE-2011-1493
+Description: multiple missing input validation in ROSE
+References:
+Notes:
+ jmm> Only be20 was merged into 2.6.32.37 and 2.6.38.3 stable
+Bugs:
+upstream: released (2.6.39-rc1) [be20250c13f88375345ad99950190685eda51eb8, e0bccd315db0c2f919e7fcf9cb60db21d9986f52]
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed