r4666 - people/horms/patch_notes/cve

[Simon Horman]

Author: horms
Date: 2005-10-27 07:41:55 +0000 (Thu, 27 Oct 2005)
New Revision: 4666

Added:
   people/horms/patch_notes/cve/setkeys-needs-root.patch
Log:
Added setkeys-needs-root.patch (CVE-2005-3257). How do I make the symlink to CVE-2005-3257?

Copied: people/horms/patch_notes/cve/setkeys-needs-root.patch (from rev 4660, people/horms/patch_notes/cve/00boilerplate)
===================================================================
--- people/horms/patch_notes/cve/00boilerplate	2005-10-26 20:27:03 UTC (rev 4660)
+++ people/horms/patch_notes/cve/setkeys-needs-root.patch	2005-10-27 07:41:55 UTC (rev 4666)
@@ -0,0 +1,21 @@
+A boilerplate for tracking the status of patches across Debian Kernel trees.
+dannf> should anything go above this line?
+dannf> should we use debian-style rfc822 for this for machine readability?
+======================================================
+Candidate: CVE-2005-3257
+URL: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE-2005-3257
+Reference: MISC:##URL## 
+CONFIRM: http://article.gmane.org/gmane.linux.debian.devel.bugs.general/8533
+Description: 
+ The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12 allows local
+ users to use the KDSKBSENT ioctl on terminals of other users and gain
+ privileges, as demonstrated by modifying key bindings using loadkeys. 
+
+Bug: #334113
+fixed-upstream: Not upstream yet, but in -mm tree
+2.6.13: pending upstream
+2.6.12: pending upstream
+2.6.8-sarge-security: pending upstream
+2.6.8-sarge: pending upstream
+2.4.27-sarge-security: pending upstream
+2.4.27-sarge/sid: pending upstream