[Secure-testing-commits] r1456 - data/CAN

Moritz Muehlenhoff
2005-07-22T06:25:29Z

Author: jmm-guest
Date: 2005-07-22 06:24:47 +0000 (Fri, 22 Jul 2005)
New Revision: 1456

Modified:
   data/CAN/list
Log:
remove old kernel bug (already CANified as 2004-1056)

mark some as fixed that have been fixed in the 2.6
stable series. I''ll go through all kernel 2.6 bugs
in a more coordinated manner to double check they''re
all fixed and add additional entries for the linux-2.6
src package.


Modified: data/CAN/list
==================================================================---
data/CAN/list	2005-07-22 06:00:41 UTC (rev 1455)
+++ data/CAN/list	2005-07-22 06:24:47 UTC (rev 1456)
@@ -2022,8 +2022,6 @@
 	NOTE: For full details download the sources and see the changelog entry
 	NOTE: from 2005-05-31  Dmitry V. Levin  <ldv@altlinux.org>
 	- strace 4.5.12-1 (low)
-CAN-2005-XXXX [Local privilege escalation through insufficient DRM range
checks]
-	- kernel-source-2.6.8 (unfixed; high)
 CAN-2005-1930
 	NOTE: reserved
 CAN-2005-1929
@@ -2075,7 +2073,7 @@
 	- centericq 4.20.0-7 (medium)
 CAN-2005-1913 [Kernel changelog for 2.6.12.1: Clean up subthread exec]
 	NOTE: reserved
-	TODO: Check 2.6.8
+	- linux-2.6 2.6.12-1 (medium)
 	- kernel-source-2.6.11 2.6.11-6 (normal)
 CAN-2005-1912
 	NOTE: rejected
@@ -2400,16 +2398,20 @@
 	NOTE: not-for-us (RealPlayer)
 CAN-2005-1765 (syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64
platform, ...)
 	- kernel-source-2.6.8 (unfixed; unknown)
+	- linux-2.6 2.6.12-1 (medium)
+	NOTE: Fixed in the 2.6.11 stable series and merged into 2.6.12
 CAN-2005-1764 [Unspecified DoS vulnerability on amd64]
 	NOTE: reserved
 	- kernel-source-2.6.8 (unfixed; unknown)
 CAN-2005-1763 (Buffer overflow in ptrace in the Linux Kernel for 64-bit
architectures ...)
 	- kernel-source-2.6.8 (unfixed; unknown)
 CAN-2005-1762 (The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the
AMD64 ...)
+	- linux-2.6 2.6.12-1 (medium)
+	NOTE: Fixed in the 2.6.11 stable series and merged into 2.6.12
 	- kernel-source-2.6.8 (unfixed; unknown)
 CAN-2005-1761 [Kernel changelog for 2.6.12.1: ia64 ptrace + sigrestore_context]
 	NOTE: reserved
-	TODO: Check 2.6.8
+	- linux-2.6 2.6.12-1 (medium)
 	- kernel-source-2.6.11 2.6.11-6 (normal)
 CAN-2005-1760 (sysreport 1.3.15 and earlier includes contents of the up2date
file in ...)
 	NOTE: not-for-us (sysreport)