[kernel] r6605 - patch-tracking

[Dann Frazier]

Author: dannf
Date: Thu May 18 23:24:39 2006
New Revision: 6605

Modified:
   patch-tracking/CVE-2006-2271

Log:
pending fix in sarge3; updated metadata


Modified: patch-tracking/CVE-2006-2271
==============================================================================
--- patch-tracking/CVE-2006-2271	(original)
+++ patch-tracking/CVE-2006-2271	Thu May 18 23:24:39 2006
@@ -1,12 +1,23 @@
 Candidate: CVE-2006-2271
 References: 
-Description: SCTP DoS
+ FULLDISC:20060508 [MU-200605-01] Multiple vulnerabilities in Linux SCTP 2.6.16
+ URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html
+ MISC:http://labs.musecurity.com/advisories/MU-200605-01.txt
+ CONFIRM:http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=35d63edb1c807bc5317e49592260e84637bc432e
+ FRSIRT:ADV-2006-1734
+ URL:http://www.frsirt.com/english/advisories/2006/1734
+ SECUNIA:19990
+ URL:http://secunia.com/advisories/19990 
+Description:
+ The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote
+ attackers to cause a denial of service (kernel panic) via an unexpected chunk
+ when the session is in CLOSED state.
 Notes: 
 Bugs: 
 upstream: released (2.6.16.15)
 linux-2.6:
-2.6.8-sarge-security: 
-2.4.27-sarge-security: 
+2.6.8-sarge-security: pending (2.6.8-16sarge3)
+2.4.27-sarge-security: pending (2.4.27-10sarge3)
 2.4.27:
 2.4.19-woody-security: 
 2.4.18-woody-security: