Moritz Muehlenhoff
2011-Feb-16 09:13 UTC
[Secure-testing-commits] r16160 - in data: CVE DSA
Author: jmm
Date: 2011-02-16 09:13:12 +0000 (Wed, 16 Feb 2011)
New Revision: 16160
Modified:
data/CVE/list
data/DSA/list
Log:
update 2.6.26 status from kernel-sec tracker
Modified: data/CVE/list
==================================================================---
data/CVE/list 2011-02-16 09:01:39 UTC (rev 16159)
+++ data/CVE/list 2011-02-16 09:13:12 UTC (rev 16160)
@@ -3563,6 +3563,7 @@
RESERVED
CVE-2010-4263 (The igb_receive_skb function in drivers/net/igb/igb_main.c in
the ...)
- linux-2.6 2.6.32-30
+ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
CVE-2010-4262 (Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows
remote ...)
- xfig 3.2.5.b-1.1 (bug #606257)
NOTE: details and patch at https://bugzilla.redhat.com/659676
@@ -3801,6 +3802,7 @@
- udev <not-affected> (vulnerable script not shipped; fedora-specific
issue)
CVE-2010-4175 (Integer overflow in the rds_cmsg_rdma_args function
(net/rds/rdma.c) ...)
- linux-2.6 2.6.32-28
+ [lenny] - linux-2.6 <not-affected> (RDS introduced in 2.6.30)
CVE-2010-4174
RESERVED
CVE-2010-4173 (The default configuration of libsdp.conf in libsdp 1.1.104 and
earlier ...)
@@ -3814,6 +3816,7 @@
- systemtap 1.2-3 (bug #603946)
CVE-2010-4169 (Use-after-free vulnerability in mm/mprotect.c in the Linux
kernel ...)
- linux-2.6 2.6.32-29
+ [lenny] - linux-2.6 <not-affected> (perf counters not yet present)
CVE-2010-4168 (Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before
1.0.5 ...)
- openttd 1.0.4-3 (bug #603752)
[lenny] - openttd <not-affected> (Introduced in 1.0)
@@ -3824,6 +3827,7 @@
NOT-FOR-US: Joomla
CVE-2010-4165 (The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux
kernel ...)
- linux-2.6 2.6.32-28
+ [lenny] - linux-2.6 <not-affected> (Introduced in 2.6.28)
CVE-2010-4164 (Multiple integer underflows in the x25_parse_facilities function
in ...)
{DSA-2126-1}
- linux-2.6 2.6.32-28
@@ -3835,6 +3839,7 @@
- linux-2.6 2.6.32-29
CVE-2010-4161 (The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain
Red Hat ...)
- linux-2.6 2.6.28-1
+ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
NOTE: https://bugzilla.redhat.com/CVE-2010-4161
CVE-2010-4159 (Untrusted search path vulnerability in metadata/loader.c in Mono
2.8 ...)
- mono 2.6.7-4 (bug #605097)
@@ -4503,6 +4508,7 @@
NOT-FOR-US: CMS Made Simple
CVE-2010-3881 (arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not
...)
- linux-2.6 2.6.32-29 (low)
+ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
CVE-2010-3880 (net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does
not ...)
{DSA-2126-1}
- linux-2.6 2.6.32-30 (low)
@@ -5073,6 +5079,7 @@
- linux-2.6 2.6.32-31
CVE-2010-3698 (The KVM implementation in the Linux kernel before 2.6.36 does
not ...)
- linux-2.6 2.6.32-28
+ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
CVE-2010-3697 (The wait_for_child_to_die function in main/event.c in FreeRADIUS
2.1.x ...)
- freeradius 2.1.10+dfsg-1 (bug #600176; unimportant)
NOTE: requires server to be down already
@@ -7072,6 +7079,7 @@
- linux-2.6 2.6.32-26
CVE-2010-2962 (drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution
Manager ...)
- linux-2.6 2.6.32-25
+ [lenny] - linux-2.6 <not-affected> (Vulnerable code not present)
CVE-2010-2961 (mountall.c in mountall before 2.15.2 uses 0666 permissions for
the ...)
NOT-FOR-US: mountall
CVE-2010-2960 (The keyctl_session_to_parent function in security/keys/keyctl.c
in the ...)
@@ -11348,6 +11356,7 @@
- linux-2.6 2.6.32-13
CVE-2010-1436 (gfs2 in the Linux kernel 2.6.18, and possibly other versions,
does not ...)
- linux-2.6 2.6.32-25
+ [lenny] - linux-2.6 2.6.26-23
CVE-2010-1435
RESERVED
CVE-2010-1434
Modified: data/DSA/list
==================================================================---
data/DSA/list 2011-02-16 09:01:39 UTC (rev 16159)
+++ data/DSA/list 2011-02-16 09:13:12 UTC (rev 16160)
@@ -124,7 +124,7 @@
{CVE-2010-3445}
[lenny] - wireshark 1.0.2-3+lenny11
[26 Nov 2010] DSA-2126-1 linux-2.6 - several issues
- {CVE-2010-2963 CVE-2010-3067 CVE-2010-3296 CVE-2010-3297 CVE-2010-3310
CVE-2010-3432 CVE-2010-3437 CVE-2010-3442 CVE-2010-3448 CVE-2010-3477
CVE-2010-3705 CVE-2010-3848 CVE-2010-3849 CVE-2010-3850 CVE-2010-3858
CVE-2010-3859 CVE-2010-3873 CVE-2010-3874 CVE-2010-3875 CVE-2010-3876
CVE-2010-3877 CVE-2010-3880 CVE-2010-4072 CVE-2010-4073 CVE-2010-4074
CVE-2010-4078 CVE-2010-4079 CVE-2010-4080 CVE-2010-4081 CVE-2010-4083
CVE-2010-4164}
+ {CVE-2010-2963 CVE-2010-3067 CVE-2010-3296 CVE-2010-3297 CVE-2010-3310
CVE-2010-3432 CVE-2010-3437 CVE-2010-3442 CVE-2010-3448 CVE-2010-3477
CVE-2010-3705 CVE-2010-3848 CVE-2010-3849 CVE-2010-3850 CVE-2010-3858
CVE-2010-3859 CVE-2010-3873 CVE-2010-3874 CVE-2010-3875 CVE-2010-3876
CVE-2010-3877 CVE-2010-3880 CVE-2010-4072 CVE-2010-4073 CVE-2010-4074
CVE-2010-4078 CVE-2010-4079 CVE-2010-4080 CVE-2010-4081 CVE-2010-4083
CVE-2010-4157 CVE-2010-4160 CVE-2010-4164}
[lenny] - linux-2.6 2.6.26-26lenny1
[22 Nov 2010] DSA-2125-1 openssl - buffer overflow
{CVE-2010-3864}