[kernel-sec-discuss] r3565 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-11-24 12:42:24 +0000 (Mon, 24 Nov 2014)
New Revision: 3565

Modified:
   active/CVE-2014-7841
   active/CVE-2014-7842
Log:
another kvm/squeeze issue


Modified: active/CVE-2014-7841
===================================================================
--- active/CVE-2014-7841	2014-11-24 11:57:27 UTC (rev 3564)
+++ active/CVE-2014-7841	2014-11-24 12:42:24 UTC (rev 3565)
@@ -1,7 +1,6 @@
 Description: sctp: NULL pointer dereference in af->from_addr_param on malformed packet
 References:
 Notes:
- Fixed in https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=e40607cbe270a9e8360907cb1e62ddf0736e4864 (not yet in torvalds git)
 Bugs:
 upstream: released (v3.18-rc5) [e40607cbe270a9e8360907cb1e62ddf0736e4864]
 2.6.32-upstream-stable:

Modified: active/CVE-2014-7842
===================================================================
--- active/CVE-2014-7842	2014-11-24 11:57:27 UTC (rev 3564)
+++ active/CVE-2014-7842	2014-11-24 12:42:24 UTC (rev 3565)
@@ -12,6 +12,6 @@
 2.6.32-upstream-stable:
 sid: needed
 3.2-wheezy-security:
-2.6.32-squeeze-security:
+2.6.32-squeeze-security: ignored "KVM not supported in squeeze LTS"
 3.16-upstream-stable: needed
 3.2-upstream-stable: