r4667 - people/horms/patch_notes/cve

[Simon Horman]

Author: horms
Date: 2005-10-27 07:42:52 +0000 (Thu, 27 Oct 2005)
New Revision: 4667

Added:
   people/horms/patch_notes/cve/CVE-2005-3257
Log:
Added Symlink :)
ln -s setkeys-needs-root.patch CVE-2005-3257
svn add CVE-2005-3257
svn commit


Added: people/horms/patch_notes/cve/CVE-2005-3257
===================================================================
--- people/horms/patch_notes/cve/CVE-2005-3257	2005-10-27 07:41:55 UTC (rev 4666)
+++ people/horms/patch_notes/cve/CVE-2005-3257	2005-10-27 07:42:52 UTC (rev 4667)
@@ -0,0 +1,21 @@
+A boilerplate for tracking the status of patches across Debian Kernel trees.
+dannf> should anything go above this line?
+dannf> should we use debian-style rfc822 for this for machine readability?
+======================================================
+Candidate: CVE-2005-3257
+URL: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE-2005-3257
+Reference: MISC:##URL## 
+CONFIRM: http://article.gmane.org/gmane.linux.debian.devel.bugs.general/8533
+Description: 
+ The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12 allows local
+ users to use the KDSKBSENT ioctl on terminals of other users and gain
+ privileges, as demonstrated by modifying key bindings using loadkeys. 
+
+Bug: #334113
+fixed-upstream: Not upstream yet, but in -mm tree
+2.6.13: pending upstream
+2.6.12: pending upstream
+2.6.8-sarge-security: pending upstream
+2.6.8-sarge: pending upstream
+2.4.27-sarge-security: pending upstream
+2.4.27-sarge/sid: pending upstream