[kernel-sec-discuss] r2596 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-01-12 15:12:17 +0000 (Thu, 12 Jan 2012)
New Revision: 2596

Added:
   active/CVE-2012-0044
   active/CVE-2012-0045
Log:
two new kernel issues


Added: active/CVE-2012-0044
===================================================================
--- active/CVE-2012-0044	                        (rev 0)
+++ active/CVE-2012-0044	2012-01-12 15:12:17 UTC (rev 2596)
@@ -0,0 +1,9 @@
+Description: drm: integer overflow in drm_mode_dirtyfb_ioctl()
+References:
+Notes:
+Bugs:
+upstream: released (3.2) [a5cd335165e31db9dbab636fd29895d41da55dd2]
+2.6.32-upstream-stable: needed
+sid: released (3.1.5-1)
+2.6.26-lenny-security:
+2.6.32-squeeze-security: needed

Added: active/CVE-2012-0045
===================================================================
--- active/CVE-2012-0045	                        (rev 0)
+++ active/CVE-2012-0045	2012-01-12 15:12:17 UTC (rev 2596)
@@ -0,0 +1,12 @@
+Description: kvm: syscall instruction induced guest panic
+References:
+ https://bugzilla.redhat.com/show_bug.cgi?id=773370
+ https://lkml.org/lkml/2011/12/28/170
+ http://www.spinics.net/lists/kvm/msg66633.html
+Notes:
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+sid: needed
+2.6.26-lenny-security: N/A "Introduced in 2.6.32"
+2.6.32-squeeze-security: needed