[kernel-sec-discuss] r3343 - active

Ben Hutchings benh at moszumanska.debian.org
Sat May 10 20:41:45 UTC 2014


Author: benh
Date: 2014-05-10 20:41:45 +0000 (Sat, 10 May 2014)
New Revision: 3343

Modified:
   active/CVE-2014-0181
   active/CVE-2014-0196
Log:
Update issues fixed in 3.15-rc5

Modified: active/CVE-2014-0181
===================================================================
--- active/CVE-2014-0181	2014-05-09 01:22:20 UTC (rev 3342)
+++ active/CVE-2014-0181	2014-05-10 20:41:45 UTC (rev 3343)
@@ -1,9 +1,8 @@
 Description:  It is possible to reconfigure the network on Linux by calling write(2) on an appropriately connected netlink socket.  By passing such a socket as stdout or stderr to a setuid program, anyone can reconfigure the network.
 References:
- https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=90f62cf30a78721641e08737bda787552428061e
 Notes:
 Bugs:
-upstream: needed
+upstream: released (3.15-rc5) [90f62cf30a78721641e08737bda787552428061e]
 2.6.32-upstream-stable:
 sid:
 3.2-wheezy-security:

Modified: active/CVE-2014-0196
===================================================================
--- active/CVE-2014-0196	2014-05-09 01:22:20 UTC (rev 3342)
+++ active/CVE-2014-0196	2014-05-10 20:41:45 UTC (rev 3343)
@@ -2,7 +2,7 @@
 References: http://seclists.org/oss-sec/2014/q2/243
 Notes:
 Bugs:
-upstream: pending (3.15-rc5) [4291086b1f081b869c6d79e5b7441633dc3ace00]
+upstream: released (3.15-rc5) [4291086b1f081b869c6d79e5b7441633dc3ace00]
 2.6.32-upstream-stable:
 sid:
 3.2-wheezy-security:




More information about the kernel-sec-discuss mailing list