[kernel] r5065 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Wed Dec 21 17:08:12 2005
New Revision: 5065

Added:
   patch-tracking/CVE-2005-0767
Log:
radeon dri local root (already fixed)


Added: patch-tracking/CVE-2005-0767
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2005-0767	Wed Dec 21 17:08:12 2005
@@ -0,0 +1,23 @@
+Candidate: CVE-2005-0767
+References: 
+ http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
+ http://www.ubuntulinux.org/support/documentation/usn/usn-95-1
+Description: 
+ Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows
+ local users with DRI privileges to execute arbitrary code as root.
+Notes: 
+ horms> For the record:
+ horms> The patch seems to already be present in 2.6.11.
+ horms> And the bug does not seem to be present in 2.4.27.
+Bugs: 297203
+upstream: released (2.6.11-rc4)
+linux-2.6: N/A
+2.6.8-sarge-security: N/A
+2.4.27-sarge-security: N/A
+2.6.8: released (2.6.8-15)
+2.4.19-woody-security: N/A
+2.4.18-woody-security: N/A
+2.4.17-woody-security: N/A
+2.4.16-woody-security: N/A
+2.4.17-woody-security-hppa: N/A
+2.4.17-woody-security-ia64: N/A