[kernel] r6770 - patch-tracking
Moritz Muehlenhoff
jmm-guest at costa.debian.org
Wed May 31 08:12:30 UTC 2006
Author: jmm-guest
Date: Wed May 31 08:12:29 2006
New Revision: 6770
Added:
patch-tracking/CVE-2006-1052
Modified:
patch-tracking/CVE-2006-2275
Log:
new selinux issue
checked an older one
Added: patch-tracking/CVE-2006-1052
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2006-1052 Wed May 31 08:12:29 2006
@@ -0,0 +1,21 @@
+Candidate: CVE-2006-1052
+References:
+ http://marc.theaimsgroup.com/?l=selinux&m=114226465106131&w=2
+ http://marc.theaimsgroup.com/?l=git-commits-head&m=114210002712363&w=2
+ http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/
+Description:
+ The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local
+ users with ptrace permissions to change the tracer SID to an SID of another
+ process.
+Notes:
+Bugs:
+upstream: released (2.6.16)
+linux-2.6: released (2.6.16-1)
+2.6.8-sarge-security: needed
+2.4.27-sarge-security: N/A
+2.4.19-woody-security: N/A
+2.4.18-woody-security: N/A
+2.4.17-woody-security: N/A
+2.4.16-woody-security: N/A
+2.4.17-woody-security-hppa: N/A
+2.4.17-woody-security-ia64: N/A
Modified: patch-tracking/CVE-2006-2275
==============================================================================
--- patch-tracking/CVE-2006-2275 (original)
+++ patch-tracking/CVE-2006-2275 Wed May 31 08:12:29 2006
@@ -1,7 +1,14 @@
Candidate: CVE-2006-2275
References:
+ http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5
Description:
+ Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a
+ denial of service (deadlock) via a large number of small messages
+ to a receiver application that cannot process the messages quickly
+ enough, which leads to "spillover of the receive buffer."
Notes:
+ jmm> Seems like an ABI-breaker, the sctp_chunk struct is changed in the
+ jmm> upstream fix
Bugs:
upstream: released (2.6.16.15)
linux-2.6: released (2.6.16-13)
More information about the Kernel-svn-changes
mailing list