[kernel-sec-discuss] r2414 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-07-20 08:54:57 +0000 (Wed, 20 Jul 2011)
New Revision: 2414

Added:
   active/CVE-2011-2699
   active/CVE-2011-2700
Log:
two new kernel issues


Added: active/CVE-2011-2699
===================================================================
--- active/CVE-2011-2699	                        (rev 0)
+++ active/CVE-2011-2699	2011-07-20 08:54:57 UTC (rev 2414)
@@ -0,0 +1,11 @@
+Description: ipv6: make fragment identifications less predictable
+References:
+ https://bugzilla.redhat.com/show_bug.cgi?id=723429
+ http://thread.gmane.org/gmane.linux.network/201773/focus=201776
+Notes:
+Bugs:
+upstream:
+2.6.32-upstream-stable:
+sid:
+2.6.26-lenny-security:
+2.6.32-squeeze-security:

Added: active/CVE-2011-2700
===================================================================
--- active/CVE-2011-2700	                        (rev 0)
+++ active/CVE-2011-2700	2011-07-20 08:54:57 UTC (rev 2414)
@@ -0,0 +1,10 @@
+Description: buffer overflow in si4713 radio driver
+References:
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=dc6b845044ccb7e9e6f3b7e71bd179b3cf0223b6
+Notes:
+Bugs:
+upstream: needed
+2.6.32-upstream-stable: needed
+sid: needed
+2.6.26-lenny-security: N/A "Driver introduced in 2.6.32"
+2.6.32-squeeze-security: needed