[kernel-sec-discuss] r3599 - active retired

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Dec 9 05:14:11 UTC 2014


Author: jmm
Date: 2014-12-09 05:14:11 +0000 (Tue, 09 Dec 2014)
New Revision: 3599

Added:
   retired/CVE-2014-7843
   retired/CVE-2014-8086
Removed:
   active/CVE-2014-7843
   active/CVE-2014-8086
Log:
retire


Deleted: active/CVE-2014-7843
===================================================================
--- active/CVE-2014-7843	2014-12-09 05:13:36 UTC (rev 3598)
+++ active/CVE-2014-7843	2014-12-09 05:14:11 UTC (rev 3599)
@@ -1,13 +0,0 @@
-Description: copying from /dev/zero causes local DoS
-References:
- https://bugzilla.redhat.com/show_bug.cgi?id=1163744
- Upstream patch proposal: https://lkml.org/lkml/2014/11/12/584
-Notes:
-Bugs:
-upstream: released (3.18-rc5) [97fc15436b36ee3956efad83e22a557991f7d19d]
-2.6.32-upstream-stable: N/A "arm64 introduced in 3.7"
-sid: released (3.16.7-ckt2-1)
-3.2-wheezy-security: N/A "arm64 introduced in 3.7"
-2.6.32-squeeze-security: N/A "arm64 introduced in 3.7"
-3.16-upstream-stable: released (3.16.7-ckt2)
-3.2-upstream-stable: N/A "arm64 introduced in 3.7"

Deleted: active/CVE-2014-8086
===================================================================
--- active/CVE-2014-8086	2014-12-09 05:13:36 UTC (rev 3598)
+++ active/CVE-2014-8086	2014-12-09 05:14:11 UTC (rev 3599)
@@ -1,12 +0,0 @@
-Description: ext4: fix race between write and fcntl(F_SETFL)
-References:
- http://www.spinics.net/lists/linux-ext4/msg45683.html
-Notes:
-Bugs:
-upstream: released (3.18-rc3) [a41537e69b4aa43f0fea02498c2595a81267383b]
-2.6.32-upstream-stable: N/A "Vulnerable code not present"
-sid: released (3.16.7-ckt2-1)
-3.2-wheezy-security: N/A "Vulnerable code not present"
-2.6.32-squeeze-security: N/A "Vulnerable code not present"
-3.16-upstream-stable: released (3.16.7-ckt1)
-3.2-upstream-stable: N/A "Vulnerable code not present"

Copied: retired/CVE-2014-7843 (from rev 3598, active/CVE-2014-7843)
===================================================================
--- retired/CVE-2014-7843	                        (rev 0)
+++ retired/CVE-2014-7843	2014-12-09 05:14:11 UTC (rev 3599)
@@ -0,0 +1,13 @@
+Description: copying from /dev/zero causes local DoS
+References:
+ https://bugzilla.redhat.com/show_bug.cgi?id=1163744
+ Upstream patch proposal: https://lkml.org/lkml/2014/11/12/584
+Notes:
+Bugs:
+upstream: released (3.18-rc5) [97fc15436b36ee3956efad83e22a557991f7d19d]
+2.6.32-upstream-stable: N/A "arm64 introduced in 3.7"
+sid: released (3.16.7-ckt2-1)
+3.2-wheezy-security: N/A "arm64 introduced in 3.7"
+2.6.32-squeeze-security: N/A "arm64 introduced in 3.7"
+3.16-upstream-stable: released (3.16.7-ckt2)
+3.2-upstream-stable: N/A "arm64 introduced in 3.7"


Property changes on: retired/CVE-2014-7843
___________________________________________________________________
Added: svn:mergeinfo
   + 

Copied: retired/CVE-2014-8086 (from rev 3598, active/CVE-2014-8086)
===================================================================
--- retired/CVE-2014-8086	                        (rev 0)
+++ retired/CVE-2014-8086	2014-12-09 05:14:11 UTC (rev 3599)
@@ -0,0 +1,12 @@
+Description: ext4: fix race between write and fcntl(F_SETFL)
+References:
+ http://www.spinics.net/lists/linux-ext4/msg45683.html
+Notes:
+Bugs:
+upstream: released (3.18-rc3) [a41537e69b4aa43f0fea02498c2595a81267383b]
+2.6.32-upstream-stable: N/A "Vulnerable code not present"
+sid: released (3.16.7-ckt2-1)
+3.2-wheezy-security: N/A "Vulnerable code not present"
+2.6.32-squeeze-security: N/A "Vulnerable code not present"
+3.16-upstream-stable: released (3.16.7-ckt1)
+3.2-upstream-stable: N/A "Vulnerable code not present"


Property changes on: retired/CVE-2014-8086
___________________________________________________________________
Added: svn:mergeinfo
   + 




More information about the kernel-sec-discuss mailing list