[kernel] r6586 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Wed May 17 05:10:29 2006
New Revision: 6586

Added:
   patch-tracking/CVE-2006-1863
Modified:
   patch-tracking/CVE-2006-0039

Log:
CIFS chroot escape issue
updates on iptables race


Modified: patch-tracking/CVE-2006-0039
==============================================================================
--- patch-tracking/CVE-2006-0039	(original)
+++ patch-tracking/CVE-2006-0039	Wed May 17 05:10:29 2006
@@ -1,7 +1,10 @@
 Candidate: CVE-2006-0039
 References: 
+ https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191698
 Description: netfilter do_add_counters race
 Notes: 
+ jmm> Only exploitable with CAP_NET_ADMIN privilege
+ jmm> exposure is leakage of sensitive information
 Bugs: 
 upstream: 
 linux-2.6:

Added: patch-tracking/CVE-2006-1863
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2006-1863	Wed May 17 05:10:29 2006
@@ -0,0 +1,17 @@
+Candidate: CVE-2006-1863
+References: 
+ http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=296034f7de8bdf111984ce1630ac598a9c94a253
+Description: cifs chroot escape 
+Notes: 
+ jmm> 2.4 doesn't have CIFS
+Bugs: 
+upstream: released (2.6.16.11)
+linux-2.6: released (2.6.16-10)
+2.6.8-sarge-security: pending (2.6.8-16sarge3)
+2.4.27-sarge-security: N/A
+2.4.19-woody-security: N/A
+2.4.18-woody-security: N/A
+2.4.17-woody-security: N/A
+2.4.16-woody-security: N/A
+2.4.17-woody-security-hppa: N/A
+2.4.17-woody-security-ia64: N/A