[kernel-sec-discuss] r2547 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-11-17 21:20:15 +0000 (Thu, 17 Nov 2011)
New Revision: 2547

Modified:
   active/CVE-2011-4077
   active/CVE-2011-4097
   active/CVE-2011-4131
   active/CVE-2011-4132
Log:
updates for 3.2-rc2


Modified: active/CVE-2011-4077
===================================================================
--- active/CVE-2011-4077	2011-11-17 16:29:40 UTC (rev 2546)
+++ active/CVE-2011-4077	2011-11-17 21:20:15 UTC (rev 2547)
@@ -6,7 +6,7 @@
  Proposed patch doesn't seem to fix the bug, due to possible integer
  overflow.
 Bugs:
-upstream: needed
+upstream: released (3.2-rc2) [b52a360b2aa1c59ba9970fb0f52bbb093fcc7a24]
 2.6.32-upstream-stable: needed
 sid: released (3.0.0-6) [bugfix/all/xfs-fix-memory-corruption-in-xfs_readlink.patch, bugfix/all/xfs-fix-memory-corruption-in-xfs_readlink-2.patch]
 2.6.26-lenny-security: 

Modified: active/CVE-2011-4097
===================================================================
--- active/CVE-2011-4097	2011-11-17 16:29:40 UTC (rev 2546)
+++ active/CVE-2011-4097	2011-11-17 21:20:15 UTC (rev 2547)
@@ -3,7 +3,7 @@
  https://lkml.org/lkml/2011/10/31/138
 Notes:
 Bugs:
-upstream: needed
+upstream: needed "no upstream fix as of 2011.11.17"
 2.6.32-upstream-stable: N/A "Introduced in 2.6.39"
 sid: released (3.0.0-6) [bugfix/all/oom-fix-integer-overflow-of-points-in-oom_badness.patch]
 2.6.26-lenny-security: N/A "Introduced in 2.6.39"

Modified: active/CVE-2011-4131
===================================================================
--- active/CVE-2011-4131	2011-11-17 16:29:40 UTC (rev 2546)
+++ active/CVE-2011-4131	2011-11-17 21:20:15 UTC (rev 2547)
@@ -3,7 +3,7 @@
  http://www.spinics.net/lists/linux-nfs/msg25288.html
 Notes:
 Bugs:
-upstream: needed
+upstream: needed "no upstream fix as of 2011.11.17"
 2.6.32-upstream-stable: needed
 sid: needed
 2.6.26-lenny-security: needed

Modified: active/CVE-2011-4132
===================================================================
--- active/CVE-2011-4132	2011-11-17 16:29:40 UTC (rev 2546)
+++ active/CVE-2011-4132	2011-11-17 21:20:15 UTC (rev 2547)
@@ -1,9 +1,8 @@
 Description: jbd/jbd2: invalid value of first log block leads to oops
 References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8762202dd0d6e46854f786bdb6fb3780a1625efe
 Notes:
 Bugs:
-upstream: needed
+upstream: released (3.2-rc2) [8762202dd0d6e46854f786bdb6fb3780a1625efe]
 2.6.32-upstream-stable: needed
 sid: needed
 2.6.26-lenny-security: needed