[kernel-sec-discuss] r2392 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-06-28 15:08:45 +0000 (Tue, 28 Jun 2011)
New Revision: 2392

Added:
   active/CVE-2011-2494
   active/CVE-2011-2495
Log:
two minor local information leaks


Added: active/CVE-2011-2494
===================================================================
--- active/CVE-2011-2494	                        (rev 0)
+++ active/CVE-2011-2494	2011-06-28 15:08:45 UTC (rev 2392)
@@ -0,0 +1,10 @@
+Description: taskstats: restrict access to user (CVE-2011-2494)
+References:
+ https://patchwork.kernel.org/patch/916042/
+Notes:
+Bugs:
+upstream:
+2.6.32-upstream-stable:
+sid:
+2.6.26-lenny-security:
+2.6.32-squeeze-security:

Added: active/CVE-2011-2495
===================================================================
--- active/CVE-2011-2495	                        (rev 0)
+++ active/CVE-2011-2495	2011-06-28 15:08:45 UTC (rev 2392)
@@ -0,0 +1,10 @@
+Description: proc: restrict access to /proc/PID/io
+References:
+ https://patchwork.kernel.org/patch/916032/
+Notes:
+Bugs:
+upstream:
+2.6.32-upstream-stable:
+sid:
+2.6.26-lenny-security:
+2.6.32-squeeze-security: