[kernel-sec-discuss] r2218 - retired

Moritz Muehlenhoff jmm at alioth.debian.org
Mon Mar 7 16:07:57 UTC 2011


Author: jmm
Date: 2011-03-07 16:07:54 +0000 (Mon, 07 Mar 2011)
New Revision: 2218

Modified:
   retired/CVE-2010-3079
   retired/CVE-2010-3081
   retired/CVE-2010-3084
   retired/CVE-2010-3296
   retired/CVE-2010-3297
Log:
streamline upstream commits


Modified: retired/CVE-2010-3079
===================================================================
--- retired/CVE-2010-3079	2011-03-07 12:47:15 UTC (rev 2217)
+++ retired/CVE-2010-3079	2011-03-07 16:07:54 UTC (rev 2218)
@@ -5,10 +5,9 @@
  which allows local users to cause a denial of service (outage of all function tracing
  files) via an lseek call on a file descriptor associated with the set_ftrace_filter file. 
 References:
- 9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7
 Notes:
 Bugs:
-upstream: released (2.6.35.5)
+upstream: released (2.6.35.5) [9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7]
 2.6.32-upstream-stable: released (2.6.32.22)
 linux-2.6: released (2.6.32-24)
 2.6.26-lenny-security: N/A (Introduced in 2.6.30 (8fc0c701), ftrace not present anyway)

Modified: retired/CVE-2010-3081
===================================================================
--- retired/CVE-2010-3081	2011-03-07 12:47:15 UTC (rev 2217)
+++ retired/CVE-2010-3081	2011-03-07 16:07:54 UTC (rev 2218)
@@ -3,9 +3,8 @@
 References:
  http://sota.gen.nz/compat1/
 Notes:
- commit c41d68a
 Bugs:
-upstream: released (2.6.36-rc5) 
+upstream: released (2.6.36-rc5) [c41d68a]
 2.6.32-upstream-stable: released (2.6.32.22) [compat-make-compat_alloc_user_space-incorporate-the-access_ok.patch]
 linux-2.6: released (2.6.32-23) [bugfix/all/compat-make-compat_alloc_user_space-incorporate-the-access_ok.patch]
 2.6.26-lenny-security: released (2.6.26-25lenny1) [bugfix/all/compat-make-compat_alloc_user_space-incorporate-the_access_ok.patch]

Modified: retired/CVE-2010-3084
===================================================================
--- retired/CVE-2010-3084	2011-03-07 12:47:15 UTC (rev 2217)
+++ retired/CVE-2010-3084	2011-03-07 16:07:54 UTC (rev 2218)
@@ -3,9 +3,8 @@
 References:
  https://bugzilla.redhat.com/show_bug.cgi?id=632069
 Notes:
- commit ee9c5cfa
 Bugs:
-upstream: released (2.6.36-rc4) 
+upstream: released (2.6.36-rc4) [ee9c5cfa]
 2.6.32-upstream-stable:
 linux-2.6: released (2.6.32-25) [bugfix/all/niu-fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.patch]
 2.6.26-lenny-security: N/A "vulnerable code not added until 2d96cf8 in 2.6.30"

Modified: retired/CVE-2010-3296
===================================================================
--- retired/CVE-2010-3296	2011-03-07 12:47:15 UTC (rev 2217)
+++ retired/CVE-2010-3296	2011-03-07 16:07:54 UTC (rev 2218)
@@ -3,9 +3,8 @@
 References:
  https://bugzilla.redhat.com/633149
 Notes:
- jmm> 49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de
 Bugs:
-upstream: released (2.6.36-rc5)
+upstream: released (2.6.36-rc5) [49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de]
 2.6.32-upstream-stable: released (2.6.32.23)
 linux-2.6: released (2.6.32-24)
 2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/cxgb3-prevent-reading-uninitialized-stack-memory.patch]

Modified: retired/CVE-2010-3297
===================================================================
--- retired/CVE-2010-3297	2011-03-07 12:47:15 UTC (rev 2217)
+++ retired/CVE-2010-3297	2011-03-07 16:07:54 UTC (rev 2218)
@@ -3,9 +3,8 @@
 References:
  https://bugzilla.redhat.com/633145
 Notes:
- jmm> 44467187dc22fdd33a1a06ea0ba86ce20be3fe3c
 Bugs:
-upstream: released (2.6.36-rc5)
+upstream: released (2.6.36-rc5) [44467187dc22fdd33a1a06ea0ba86ce20be3fe3c]
 2.6.32-upstream-stable: released (2.6.32.23)
 linux-2.6: released (2.6.32-24)
 2.6.26-lenny-security: released (2.6.26-26lenny1) [bugfix/all/net-eql-prevent-reading-uninitialized-stack-memory.patch]




More information about the kernel-sec-discuss mailing list