[kernel-sec-discuss] r2241 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-03-25 09:22:08 +0000 (Fri, 25 Mar 2011)
New Revision: 2241

Added:
   active/CVE-2011-1476
   active/CVE-2011-1477
Modified:
   active/CVE-2011-0695
Log:
new OSS issues


Modified: active/CVE-2011-0695
===================================================================
--- active/CVE-2011-0695	2011-03-25 07:08:34 UTC (rev 2240)
+++ active/CVE-2011-0695	2011-03-25 09:22:08 UTC (rev 2241)
@@ -4,8 +4,8 @@
  https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0695
 Notes:
 Bugs:
-upstream:
+upstream: pending (2.6.39-rc1) [25ae21a, 2996343]
 2.6.32-upstream-stable: released (2.6.32.34) [df6f458, b8f71b5]
-linux-2.6: pending (2.6.39-rc1) [25ae21a, 2996343]
+linux-2.6: needed
 2.6.26-lenny-security:
 2.6.32-squeeze-security: pending (2.6.32-32) [bugfix/all/stable/2.6.32.34.patch]

Added: active/CVE-2011-1476
===================================================================
--- active/CVE-2011-1476	                        (rev 0)
+++ active/CVE-2011-1476	2011-03-25 09:22:08 UTC (rev 2241)
@@ -0,0 +1,12 @@
+Candidate: CVE-2011-1476
+Description: MIDI underflow
+References:
+ http://marc.info/?l=linux-kernel&m=130089204124354&w=2
+Notes:
+ jmm> OSS disabled in sid
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed

Added: active/CVE-2011-1477
===================================================================
--- active/CVE-2011-1477	                        (rev 0)
+++ active/CVE-2011-1477	2011-03-25 09:22:08 UTC (rev 2241)
@@ -0,0 +1,12 @@
+Candidate: CVE-2011-1477
+Description: buffer overflow in YM8312/OPL-3 chips
+References:
+ http://marc.info/?l=linux-kernel&m=130089499728386&w=2
+Notes:
+ jmm> OSS disabled in sid
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+linux-2.6: needed
+2.6.26-lenny-security: needed
+2.6.32-squeeze-security: needed