[kernel-sec-discuss] r3120 - active retired

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-10-21 05:15:55 +0000 (Mon, 21 Oct 2013)
New Revision: 3120

Added:
   retired/CVE-2013-2894
   retired/CVE-2013-4343
Removed:
   active/CVE-2013-2894
   active/CVE-2013-4343
Modified:
   retired/CVE-2013-1858
Log:
retire


Deleted: active/CVE-2013-2894
===================================================================
--- active/CVE-2013-2894	2013-10-21 05:14:28 UTC (rev 3119)
+++ active/CVE-2013-2894	2013-10-21 05:15:55 UTC (rev 3120)
@@ -1,12 +0,0 @@
-Description: lenovo-tpkbd local DoS through zeroing out too much
-References:
- http://marc.info/?l=linux-input&m=137772187514628&w=1
-Notes:
- also needs http://marc.info/?l=linux-input&m=137772181214612&w=1
-Bugs:
-upstream: released (3.12-rc2) [0a9cd0a80ac559357c6a90d26c55270ed752aa26, 331415ff16a12147d57d5c953f3a961b7ede348b]
-2.6.32-upstream-stable: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
-sid: released (3.11.5-1)
-3.2-wheezy-security: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
-2.6.32-squeeze-security: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
-3.2-upstream-stable: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"

Deleted: active/CVE-2013-4343
===================================================================
--- active/CVE-2013-4343	2013-10-21 05:14:28 UTC (rev 3119)
+++ active/CVE-2013-4343	2013-10-21 05:15:55 UTC (rev 3120)
@@ -1,11 +0,0 @@
-Description: Use-after-free in TUNSETIFF
-References:
- http://www.spinics.net/lists/netdev/msg250066.html
-Notes:
-Bugs:
-upstream: released (3.12-rc2) [662ca437e714caaab855b12415d6ffd815985bc0]
-2.6.32-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
-sid: released (3.11.5-1)
-3.2-wheezy-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
-2.6.32-squeeze-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
-3.2-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"

Modified: retired/CVE-2013-1858
===================================================================
--- retired/CVE-2013-1858	2013-10-21 05:14:28 UTC (rev 3119)
+++ retired/CVE-2013-1858	2013-10-21 05:15:55 UTC (rev 3120)
@@ -5,7 +5,7 @@
  Prior to 3.8, CLONE_NEWUSER required CAP_SYS_ADMIN && CAP_SETUID &&
  CAP_SETGID, so no privilege escalation is possible.
 Bugs:
-upstream: pending [e66eded8309ebf679d3d3c1f5820d1f2ca332c71]
+upstream: released (3.9) [e66eded8309ebf679d3d3c1f5820d1f2ca332c71]
 2.6.32-upstream-stable: N/A
 sid: N/A
 2.6.32-squeeze-security: N/A

Copied: retired/CVE-2013-2894 (from rev 3119, active/CVE-2013-2894)
===================================================================
--- retired/CVE-2013-2894	                        (rev 0)
+++ retired/CVE-2013-2894	2013-10-21 05:15:55 UTC (rev 3120)
@@ -0,0 +1,12 @@
+Description: lenovo-tpkbd local DoS through zeroing out too much
+References:
+ http://marc.info/?l=linux-input&m=137772187514628&w=1
+Notes:
+ also needs http://marc.info/?l=linux-input&m=137772181214612&w=1
+Bugs:
+upstream: released (3.12-rc2) [0a9cd0a80ac559357c6a90d26c55270ed752aa26, 331415ff16a12147d57d5c953f3a961b7ede348b]
+2.6.32-upstream-stable: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
+sid: released (3.11.5-1)
+3.2-wheezy-security: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
+2.6.32-squeeze-security: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"
+3.2-upstream-stable: N/A "Introduced in 3.6 with commit c1dcad2d32d0252e8a3023d20311b52a187ecda3"


Property changes on: retired/CVE-2013-2894
___________________________________________________________________
Added: svn:mergeinfo
   + 

Copied: retired/CVE-2013-4343 (from rev 3119, active/CVE-2013-4343)
===================================================================
--- retired/CVE-2013-4343	                        (rev 0)
+++ retired/CVE-2013-4343	2013-10-21 05:15:55 UTC (rev 3120)
@@ -0,0 +1,11 @@
+Description: Use-after-free in TUNSETIFF
+References:
+ http://www.spinics.net/lists/netdev/msg250066.html
+Notes:
+Bugs:
+upstream: released (3.12-rc2) [662ca437e714caaab855b12415d6ffd815985bc0]
+2.6.32-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+sid: released (3.11.5-1)
+3.2-wheezy-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+2.6.32-squeeze-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+3.2-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"


Property changes on: retired/CVE-2013-4343
___________________________________________________________________
Added: svn:mergeinfo
   +