r4353 - people/micah

[Micah Anderson]

Author: micah
Date: 2005-10-07 21:27:50 +0000 (Fri, 07 Oct 2005)
New Revision: 4353

Modified:
   people/micah/pending_CVE_requests
Log:
Updated pre-requisite info and added draft text for dannf to proof


Modified: people/micah/pending_CVE_requests
===================================================================
--- people/micah/pending_CVE_requests	2005-10-07 19:37:04 UTC (rev 4352)
+++ people/micah/pending_CVE_requests	2005-10-07 21:27:50 UTC (rev 4353)
@@ -3,6 +3,11 @@
 linux-2.6.8 enabling unprivledged users to trigger an oops when
 CONFIG_PREEMPT is enabled in the kernel configuration.
 
+Draft text for CVE:
+A local denial of service was discovered in the ptrace code for ia64 in
+linux-2.6.8 enabling unprivledged users to trigger an oops when
+CONFIG_PREEMPT is enabled in the kernel configuration.
+
 from 2.6.8-16sarge1:
   * fs-exec-posix-timers-leak-1.dpatch,
     [Security] fs-exec-posix-timers-leak-2.dpatch
@@ -16,6 +21,9 @@
     hostile side of bridge from causing packet leakage, a small but possible
     security risk.
 M: dannf tracked
+M: the following are pre-requisites:
+M: net-bridge-mangle-oops-1.dpatch
+M: net-bridge-mangle-oops-2.dpatch
 
   * [Security] net-rose-ndigis-verify.dpatch
     Verify ndigis argument of a new route.
@@ -40,7 +48,7 @@
   * arch-ia64-ptrace-getregs-putregs.dpatch
     [Security, ia64] Fix unchecked user-memory accesses in ptrage_getregs()
     and ptrace_setregs.
-M: dannf tracked
+M: dannf says this is a pre-requisite for 2005-1761
 
   [ dann frazier ]
   * Merge in applicable fixes from 2.6.12.3
@@ -61,3 +69,4 @@
   * fs_ext2_ext3_xattr-sharing.dpatch
     [Security] Xattr sharing bug
     See http://lists.debian.org/debian-kernel/2005/08/msg00238.html
+