[kernel-sec-discuss] r3422 - active

[Ben Hutchings]

Author: benh
Date: 2014-06-30 15:49:31 +0000 (Mon, 30 Jun 2014)
New Revision: 3422

Modified:
   active/CVE-2014-0181
   active/CVE-2014-4508
   active/CVE-2014-4608
   active/CVE-2014-4611
   active/CVE-2014-4652
   active/CVE-2014-4653
   active/CVE-2014-4654
   active/CVE-2014-4655
   active/CVE-2014-4656
Log:
Mark issues fixed in 3.14.9-1

Modified: active/CVE-2014-0181
===================================================================
--- active/CVE-2014-0181	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-0181	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs: 746738
 upstream: released (3.15-rc5) [90f62cf30a78721641e08737bda787552428061e, 5187cd055b6e81fc6526109456f8b20623148d5f, a53b72c83a4216f2eb883ed45a0cbce014b8e62d, a3b299da869d6e78cf42ae0b1b41797bcb8c5e4b, aa4cf9452f469f16cea8c96283b641b4576d4a7b]
 2.6.32-upstream-stable: ignored "too intrusive to backport"
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security:
 2.6.32-squeeze-security: ignored "too intrusive to backport"
 3.2-upstream-stable:
\ No newline at end of file

Modified: active/CVE-2014-4508
===================================================================
--- active/CVE-2014-4508	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4508	2014-06-30 15:49:31 UTC (rev 3422)
@@ -5,7 +5,7 @@
 Bugs:
 upstream: released (3.16-rc3) [554086d85e71f30abe46fc014fea31929a7c6a8a]
 2.6.32-upstream-stable:
-sid:
+sid: released (3.14.9-1) [bugfix/x86/x86_32-entry-Do-syscall-exit-work-on-badsys-CVE-2014.patch]
 3.2-wheezy-security: released (3.2.60-1) [bugfix/x86/x86_32-entry-Do-syscall-exit-work-on-badsys-CVE-2014.patch]
 2.6.32-squeeze-security:
 3.2-upstream-stable:

Modified: active/CVE-2014-4608
===================================================================
--- active/CVE-2014-4608	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4608	2014-06-30 15:49:31 UTC (rev 3422)
@@ -5,7 +5,7 @@
 Bugs:
 upstream: released (3.16-rc3) [206a81c18401c0cde6e579164f752c4b147324ce]
 2.6.32-upstream-stable:
-sid:
+sid: released (3.14.9-1)
 3.2-wheezy-security:
 2.6.32-squeeze-security:
 3.2-upstream-stable:

Modified: active/CVE-2014-4611
===================================================================
--- active/CVE-2014-4611	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4611	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [206204a1162b995e2185275167b22468c00d6b36]
 2.6.32-upstream-stable: N/A "lz4 compression introduced in 3.11"
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: N/A "lz4 compression introduced in 3.11"
 2.6.32-squeeze-security: N/A "lz4 compression introduced in 3.11"
 3.2-upstream-stable: N/A "lz4 compression introduced in 3.11"

Modified: active/CVE-2014-4652
===================================================================
--- active/CVE-2014-4652	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4652	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [07f4d9d74a04aa7c72c5dae0ef97565f28f17b92]
 2.6.32-upstream-stable:
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: released (3.2.60-1) [bugfix/all/ALSA-control-Protect-user-controls-against-concurren.patch]
 2.6.32-squeeze-security: ignored "little impact"
 3.2-upstream-stable: needed

Modified: active/CVE-2014-4653
===================================================================
--- active/CVE-2014-4653	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4653	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [fd9f26e4eca5d08a27d12c0933fceef76ed9663d]
 2.6.32-upstream-stable: needed
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: released (3.2.60-1) [bugfix/all/ALSA-control-Don-t-access-controls-outside-of-protec.patch]
 2.6.32-squeeze-security: needed
 3.2-upstream-stable: needed

Modified: active/CVE-2014-4654
===================================================================
--- active/CVE-2014-4654	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4654	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [82262a46627bebb0febcc26664746c25cef08563]
 2.6.32-upstream-stable: needed
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: released (3.2.60-1) [bugfix/all/ALSA-control-Fix-replacing-user-controls.patch]
 2.6.32-squeeze-security: needed
 3.2-upstream-stable: needed

Modified: active/CVE-2014-4655
===================================================================
--- active/CVE-2014-4655	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4655	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [82262a46627bebb0febcc26664746c25cef08563]
 2.6.32-upstream-stable: needed
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: released (3.2.60-1) [bugfix/all/ALSA-control-Fix-replacing-user-controls.patch]
 2.6.32-squeeze-security: needed
 3.2-upstream-stable: needed

Modified: active/CVE-2014-4656
===================================================================
--- active/CVE-2014-4656	2014-06-30 13:00:52 UTC (rev 3421)
+++ active/CVE-2014-4656	2014-06-30 15:49:31 UTC (rev 3422)
@@ -4,7 +4,7 @@
 Bugs:
 upstream: released (3.16-rc2) [883a1d49f0d77d30012f114b2e19fc141beb3e8e, ac902c112d90a89e59916f751c2745f4dbdbb4bd]
 2.6.32-upstream-stable: needed
-sid: needed
+sid: released (3.14.9-1)
 3.2-wheezy-security: released (3.2.60-1) [bugfix/all/ALSA-control-Make-sure-that-id-index-does-not-overfl.patch, bugfix/all/ALSA-control-Handle-numid-overflow.patch]
 2.6.32-squeeze-security: needed
 3.2-upstream-stable: needed