[Secure-testing-commits] r675 - sarge-checks/CAN

[Joey Hess]

Author: joeyh
Date: 2005-03-28 15:58:53 +0000 (Mon, 28 Mar 2005)
New Revision: 675

Modified:
   sarge-checks/CAN/list
Log:
bunch-o-fixes in kernel team svn


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-28 10:20:39 UTC (rev 674)
+++ sarge-checks/CAN/list	2005-03-28 15:58:53 UTC (rev 675)
@@ -178,7 +178,7 @@
 CAN-2005-0840
 	NOTE: rejected
 CAN-2005-0839 (Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE ...)
-	- kernel-source-2.6.8 (unfixed; bug #301372)
+	- kernel-source-2.6.8 2.6.8-16
 CAN-2005-0838 (Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow ...)
 	- icecast2 (unfixed; bug #301368)
 CAN-2005-0837 (IceCast 2.20 allows remote attackers to bypass the XSL parser and ...)
@@ -249,7 +249,7 @@
 CAN-2005-0816 (Buffer overflow in newgrp in Solaris 7 through 9 allows local users to ...)
 	NOTE: not-for-us (Solaris)
 CAN-2005-0815 (Multiple "range checking flaws" in the ISO9660 filesystem handler in ...)
-	- kernel-source-2.6.8 (unfixed; bug #300783)
+	- kernel-source-2.6.8 2.6.8-16
 	NOTE: Seems to affect 2.4 as well, needs clarification
 CAN-2005-0814 (Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 ...)
 	- lsh-utils 2.0.1-1
@@ -376,6 +376,10 @@
 	NOTE: reserved
 CAN-2005-0750
 	NOTE: reserved
+	NOTE: according to changelog, "Fix signedness problem at socket
+	NOTE: creation in bluetooth which can lead to local root exploit."
+	- kernel-source-2.6.8 2.6.8-16
+	TODO: does it also affect 2.4?
 CAN-2005-0749
 	NOTE: reserved
 CAN-2003-1131 (PHP remote code injection vulnerability in index.php in ...)
@@ -1840,6 +1844,9 @@
 	- mozilla-firefox 1.0.2-1
 CAN-2005-0400
 	NOTE: reserved
+	NOTE: according to changelog, "Fix information leak in ext2."
+	- kernel-source-2.6.8 2.6.8-16
+	TODO: check 2.4
 CAN-2005-0399 [GIF heap overflow parsing Netscape extension 2 in Firefox]
 	- mozilla-firefox 1.0.2-1
 CAN-2005-0398 (The KAME racoon daemon in ipsec-tools before 0.5 allows remote ...)