[kernel-sec-discuss] r2733 - active retired

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-07-31 10:22:49 +0000 (Tue, 31 Jul 2012)
New Revision: 2733

Added:
   retired/CVE-2012-2373
   retired/CVE-2012-2383
   retired/CVE-2012-2384
Removed:
   active/CVE-2012-2373
   active/CVE-2012-2383
   active/CVE-2012-2384
Log:
retire more issues


Deleted: active/CVE-2012-2373
===================================================================
--- active/CVE-2012-2373	2012-07-31 10:21:40 UTC (rev 2732)
+++ active/CVE-2012-2373	2012-07-31 10:22:49 UTC (rev 2733)
@@ -1,10 +0,0 @@
-Description: mm: read_pmd_atomic: 32bit PAE pmd walk vs pmd_populate SMP race condition 
-References:
- http://permalink.gmane.org/gmane.linux.kernel.mm/78590
-Notes:
-Bugs:
-upstream: released (3.5-rc1) [26c191788f18129af0eb32a358cdaea0c7479626]
-2.6.32-upstream-stable: N/A "code not present"
-sid: released (3.2.19-1) [bugfix/x86/mm-pmd_read_atomic-fix-32bit-pae-pmd-walk-vs-pmd_populate-smp-race.patch]
-2.6.32-squeeze-security: N/A "code not present"
-3.2-upstream-stable: released (3.2.22) [queue-3.2/mm-pmd_read_atomic-fix-32bit-pae-pmd-walk-vs-pmd_populate-smp-race.patch]

Deleted: active/CVE-2012-2383
===================================================================
--- active/CVE-2012-2383	2012-07-31 10:21:40 UTC (rev 2732)
+++ active/CVE-2012-2383	2012-07-31 10:22:49 UTC (rev 2733)
@@ -1,9 +0,0 @@
-Description: overflow of cliprect kmalloc as args->num_cliprects is not bounded and passed in via a user ioctl
-References:
-Notes:
-Bugs:
-upstream: released (3.4) [ed8cd3b2cd61004cab85380c52b1817aca1ca49b]
-2.6.32-upstream-stable: N/A "Introduced in 2.6.39 with 8408c282"
-sid: released (3.2.17-1)
-2.6.32-squeeze-security: N/A "Introduced in 2.6.39 with 8408c282"
-3.2-upstream-stable: released (3.2.17) [a9206caacef21a1eeee7083d8fb188cfeb15fd52]

Deleted: active/CVE-2012-2384
===================================================================
--- active/CVE-2012-2384	2012-07-31 10:21:40 UTC (rev 2732)
+++ active/CVE-2012-2384	2012-07-31 10:22:49 UTC (rev 2733)
@@ -1,9 +0,0 @@
-Description: overflow of args->buffer_count
-References:
-Notes:
-Bugs:
-upstream: released (3.4) [44afb3a04391a74309d16180d1e4f8386fdfa745]
-2.6.32-upstream-stable: N/A "Introduced in 2.6.38 with 432e58ed"
-sid: released (3.2.17-1)
-2.6.32-squeeze-security: N/A "Introduced in 2.6.38 with 432e58ed"
-3.2-upstream-stable: released (3.2.17) [c9b310ee2b2a50ffaa6ea0ca9226c64a12ed0c54]

Copied: retired/CVE-2012-2373 (from rev 2728, active/CVE-2012-2373)
===================================================================
--- retired/CVE-2012-2373	                        (rev 0)
+++ retired/CVE-2012-2373	2012-07-31 10:22:49 UTC (rev 2733)
@@ -0,0 +1,10 @@
+Description: mm: read_pmd_atomic: 32bit PAE pmd walk vs pmd_populate SMP race condition 
+References:
+ http://permalink.gmane.org/gmane.linux.kernel.mm/78590
+Notes:
+Bugs:
+upstream: released (3.5-rc1) [26c191788f18129af0eb32a358cdaea0c7479626]
+2.6.32-upstream-stable: N/A "code not present"
+sid: released (3.2.19-1) [bugfix/x86/mm-pmd_read_atomic-fix-32bit-pae-pmd-walk-vs-pmd_populate-smp-race.patch]
+2.6.32-squeeze-security: N/A "code not present"
+3.2-upstream-stable: released (3.2.22) [queue-3.2/mm-pmd_read_atomic-fix-32bit-pae-pmd-walk-vs-pmd_populate-smp-race.patch]


Property changes on: retired/CVE-2012-2373
___________________________________________________________________
Added: svn:mergeinfo
   + 

Copied: retired/CVE-2012-2383 (from rev 2728, active/CVE-2012-2383)
===================================================================
--- retired/CVE-2012-2383	                        (rev 0)
+++ retired/CVE-2012-2383	2012-07-31 10:22:49 UTC (rev 2733)
@@ -0,0 +1,9 @@
+Description: overflow of cliprect kmalloc as args->num_cliprects is not bounded and passed in via a user ioctl
+References:
+Notes:
+Bugs:
+upstream: released (3.4) [ed8cd3b2cd61004cab85380c52b1817aca1ca49b]
+2.6.32-upstream-stable: N/A "Introduced in 2.6.39 with 8408c282"
+sid: released (3.2.17-1)
+2.6.32-squeeze-security: N/A "Introduced in 2.6.39 with 8408c282"
+3.2-upstream-stable: released (3.2.17) [a9206caacef21a1eeee7083d8fb188cfeb15fd52]


Property changes on: retired/CVE-2012-2383
___________________________________________________________________
Added: svn:mergeinfo
   + 

Copied: retired/CVE-2012-2384 (from rev 2728, active/CVE-2012-2384)
===================================================================
--- retired/CVE-2012-2384	                        (rev 0)
+++ retired/CVE-2012-2384	2012-07-31 10:22:49 UTC (rev 2733)
@@ -0,0 +1,9 @@
+Description: overflow of args->buffer_count
+References:
+Notes:
+Bugs:
+upstream: released (3.4) [44afb3a04391a74309d16180d1e4f8386fdfa745]
+2.6.32-upstream-stable: N/A "Introduced in 2.6.38 with 432e58ed"
+sid: released (3.2.17-1)
+2.6.32-squeeze-security: N/A "Introduced in 2.6.38 with 432e58ed"
+3.2-upstream-stable: released (3.2.17) [c9b310ee2b2a50ffaa6ea0ca9226c64a12ed0c54]


Property changes on: retired/CVE-2012-2384
___________________________________________________________________
Added: svn:mergeinfo
   +