[kernel] r6748 - patch-tracking

[Dann Frazier]

Author: dannf
Date: Mon May 29 03:46:07 2006
New Revision: 6748

Modified:
   patch-tracking/CVE-2006-1525

Log:
add upstream status, linux-2.6 status, description & references

Modified: patch-tracking/CVE-2006-1525
==============================================================================
--- patch-tracking/CVE-2006-1525	(original)
+++ patch-tracking/CVE-2006-1525	Mon May 29 03:46:07 2006
@@ -1,10 +1,18 @@
 Candidate: CVE-2006-1525
 References: 
-Description: ip_route_input panic fix
+ CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8
+ CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189346
+ URL:http://www.securityfocus.com/bid/17593
+ URL:http://xforce.iss.net/xforce/xfdb/25872 
+Description: 
+ ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to
+ cause a denial of service (panic) via a request for a route for a multicast
+ IP address, which triggers a null dereference.
 Notes: 
+ dannf> Submitted to Marcelo for 2.4
 Bugs: 
-upstream: 
-linux-2.6:
+upstream: released (2.6.16.8)
+linux-2.6: released (2.6.16-9)
 2.6.8-sarge-security: pending (2.6.8-16sarge3)
 2.4.27-sarge-security: pending (2.4.27-10sarge3)
 2.4.27: