[kernel-sec-discuss] r2394 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-01 06:31:42 +0000 (Fri, 01 Jul 2011)
New Revision: 2394

Added:
   active/CVE-2011-2484
   active/CVE-2011-2491
   active/CVE-2011-2492
   active/CVE-2011-2493
Log:
new kernel issues


Added: active/CVE-2011-2484
===================================================================
--- active/CVE-2011-2484	                        (rev 0)
+++ active/CVE-2011-2484	2011-07-01 06:31:42 UTC (rev 2394)
@@ -0,0 +1,10 @@
+Description: taskstats local DoS
+References:
+ http://lists.openwall.net/linux-kernel/2011/06/16/605
+Notes:
+Bugs:
+upstream: released (3.0-rc5) [26c4caea9d697043cc5a458b96411b86d7f6babd]
+2.6.32-upstream-stable: needed
+sid: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed

Added: active/CVE-2011-2491
===================================================================
--- active/CVE-2011-2491	                        (rev 0)
+++ active/CVE-2011-2491	2011-07-01 06:31:42 UTC (rev 2394)
@@ -0,0 +1,9 @@
+Description: NLM: Don't hang forever on NLM unlock requests
+References:
+Notes:
+Bugs:
+upstream: released (3.0-rc5) [0b760113a3a155269a3fba93a409c640031dd68f]
+2.6.32-upstream-stable:
+sid: needed
+2.6.26-lenny-security:
+2.6.32-squeeze-security:

Added: active/CVE-2011-2492
===================================================================
--- active/CVE-2011-2492	                        (rev 0)
+++ active/CVE-2011-2492	2011-07-01 06:31:42 UTC (rev 2394)
@@ -0,0 +1,10 @@
+Description: bluetooth leaks to userspace
+References:
+ http://permalink.gmane.org/gmane.linux.bluez.kernel/12909
+Notes:
+Bugs:
+upstream: released (3.0-rc4) [8d03e971cf403305217b8e62db3a2e5ad2d6263f]
+2.6.32-upstream-stable: needed
+sid: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed

Added: active/CVE-2011-2493
===================================================================
--- active/CVE-2011-2493	                        (rev 0)
+++ active/CVE-2011-2493	2011-07-01 06:31:42 UTC (rev 2394)
@@ -0,0 +1,10 @@
+Description: ext4: init timer earlier to avoid a kernel panic in __save_error_info
+References:
+ https://bugzilla.kernel.org/show_bug.cgi?id=32082
+Notes:
+Bugs:
+upstream: released (2.6.39) [0449641130f5652b344ef6fa39fa019d7e94660a]
+2.6.32-upstream-stable: 
+sid: released (2.6.39-1)
+2.6.26-lenny-security:
+2.6.32-squeeze-security: