[Secure-testing-commits] r13584 - data/CVE

Michael Gilbert gilbert-guest at alioth.debian.org
Thu Dec 17 17:59:32 UTC 2009


Author: gilbert-guest
Date: 2009-12-17 17:59:32 +0000 (Thu, 17 Dec 2009)
New Revision: 13584

Modified:
   data/CVE/list
Log:
kernel issues fixed in 2.6.32-2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-12-17 09:14:33 UTC (rev 13583)
+++ data/CVE/list	2009-12-17 17:59:32 UTC (rev 13584)
@@ -165,14 +165,15 @@
 	[etch] - linux-2.6 <not-affected> (ext4 introduced in 2.6.19)
 	- linux-2.6.24 <removed> (medium)
 CVE-2009-4307 (The ext4_fill_flex_info function in fs/ext4/super.c in the Linux ...)
-	- linux-2.6 <unfixed> (low)
+	- linux-2.6 2.6.32-2 (low)
 	[etch] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.27)
 	[lenny] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.27)
 	- linux-2.6.24 <not-affected> (vulnerabile code introduced in 2.6.27)
 CVE-2009-4306 (Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ...)
-	- linux-2.6 <unfixed> (medium)
-	[etch] - linux-2.6 <not-affected> (ext4 introduced in 2.6.19)
-	- linux-2.6.24 <removed> (medium)
+	- linux-2.6 2.6.32-2 (medium)
+	[etch] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.31)
+	[lenny] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.31)
+	- linux-2.6.24 <not-affected> (vulnerable code introduced in 2.6.31)
 CVE-2009-4291
 	RESERVED
 CVE-2009-4290
@@ -598,7 +599,7 @@
 CVE-2009-4132
 	REJECTED
 CVE-2009-4131 (The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ...)
-	- linux-2.6 <unfixed> (medium)
+	- linux-2.6 2.6.32-2 (medium)
 	[etch] - linux-2.6 <not-affected> (introduced in 2.6.31)
 	[lenny] - linux-2.6 <not-affected> (introduced in 2.6.31)
 	- linux-2.6.24 <not-affected> (introduced in 2.6.31)




More information about the Secure-testing-commits mailing list