[kernel-sec-discuss] r3087 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-09-13 05:44:41 +0000 (Fri, 13 Sep 2013)
New Revision: 3087

Added:
   active/CVE-2013-4343
Modified:
   active/CVE-2013-2237
Log:
new TUN issue
3.2.51 released


Modified: active/CVE-2013-2237
===================================================================
--- active/CVE-2013-2237	2013-09-11 07:45:06 UTC (rev 3086)
+++ active/CVE-2013-2237	2013-09-13 05:44:41 UTC (rev 3087)
@@ -7,4 +7,4 @@
 sid: released (3.9.4-1)
 3.2-wheezy-security: released (3.2.46-1+deb7u1) [bugfix/all/af_key-initialize-satype-in-key_notify_policy_flush.patch]
 2.6.32-squeeze-security: pending (2.6.32-48squeeze4)
-3.2-upstream-stable: pending (3.2.51)
+3.2-upstream-stable: released (3.2.51)

Added: active/CVE-2013-4343
===================================================================
--- active/CVE-2013-4343	                        (rev 0)
+++ active/CVE-2013-4343	2013-09-13 05:44:41 UTC (rev 3087)
@@ -0,0 +1,11 @@
+Description: Use-after-free in TUNSETIFF
+References:
+ http://www.spinics.net/lists/netdev/msg250066.html
+Notes:
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+sid: needed
+3.2-wheezy-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+2.6.32-squeeze-security: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"
+3.2-upstream-stable: N/A "Introduced in 3.8 with c8d68e6be1c3b242f1c598595830890b65cea64a"