Debian updates; retire several issues

git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@1197 e094ebfe-e918-0410-adfb-c712417f3574

47 files changed, 32 insertions, 30 deletions

diff --git a/active/CVE-2006-6921 b/active/CVE-2006-6921
index 8eef894e..6ddba29d 100644
--- a/active/CVE-2006-6921
+++ b/active/CVE-2006-6921
@@ -15,6 +15,7 @@ Bugs:
 upstream: 
 linux-2.6: needed
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix"
+2.6.24-etchnhalf-security: ignored "no upstream fix"
 2.6.8-sarge-security: ignored (2.6.8-16sarge7)
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: ignored
diff --git a/active/CVE-2006-7051 b/active/CVE-2006-7051
index 101d32f0..0230f85a 100644
--- a/active/CVE-2006-7051
+++ b/active/CVE-2006-7051
@@ -18,10 +18,13 @@ Notes:
         on the number of pending signals
  kees> Pending signals limit is now set by pam 0.99.x.
  jmm> d02479bdeb1c9b037892061cdcf4e730183391fa
+   dannf> The milw0rm exploit seems to still work on 2.6.24, so I don't think
+          the d02479b changeset changed this behavior.
 Bugs: 
 upstream: released (2.6.23-rc4)
 linux-2.6: released (2.6.23-1)
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream patch"
+2.6.24-etchnhalf-security: ignored "no upstream patch"
 2.6.8-sarge-security: ignored (2.6.8-17sarge1) "no upstream patch"
 2.4.27-sarge-security: N/A "No posix-timers.c"
 2.6.15-dapper-security: ignore (no upstream patch)
diff --git a/active/CVE-2007-2480 b/active/CVE-2007-2480
index 8fca6f5a..de531630 100644
--- a/active/CVE-2007-2480
+++ b/active/CVE-2007-2480
@@ -14,6 +14,7 @@ Bugs:
 upstream: released (2.6.22)
 linux-2.6: released (2.6.22-1)
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "needs backport"
+2.6.24-etchnhalf-security: N/A
 2.6.8-sarge-security: ignored (2.6.8-17sarge1) "needs backport"
 2.4.27-sarge-security: ignored (2.4.27-10sarge6) "needs backport if affected"
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2007-3719 b/active/CVE-2007-3719
index 4d1dbb35..d2814d1f 100644
--- a/active/CVE-2007-3719
+++ b/active/CVE-2007-3719
@@ -12,6 +12,7 @@ Bugs:
 upstream: 
 linux-2.6: 
 2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix"
+2.6.24-etchnhalf-security: ignored "low priority/no upstream fix"
 2.6.8-sarge-security: ignored (2.6.8-17sarge1) "no upstream fix"
 2.4.27-sarge-security: ignored (2.4.27-10sarge6) "no upstream fix"
 2.6.15-dapper-security: ignored (low priority, no obvious upstream fix)
diff --git a/active/CVE-2007-6282 b/active/CVE-2007-6282
index 50844e80..43bd3f5e 100644
--- a/active/CVE-2007-6282
+++ b/active/CVE-2007-6282
@@ -11,7 +11,7 @@ Bugs:
 upstream: 
 linux-2.6: 
 2.6.18-etch-security: pending (2.6.18.dfsg.1-18etch7) [bugfix/esp-iv-in-linear-part-of-skb.patch]
-2.6.24-etchnhalf-security:
+2.6.24-etchnhalf-security: pending (2.6.24-6~etchnhalf.4) [bugfix/esp-iv-in-linear-part-of-skb.patch]
 2.6.15-dapper-security: pending
 2.6.20-feisty-security: pending
 2.6.22-gutsy-security: pending
diff --git a/active/CVE-2007-6514 b/active/CVE-2007-6514
index a4923f6d..8248845f 100644
--- a/active/CVE-2007-6514
+++ b/active/CVE-2007-6514
@@ -7,10 +7,8 @@ Notes:
 Bugs: 
 upstream: 
 linux-2.6: 
-2.6.18-etch-security: 
-2.6.24-etchnhalf-security:
-2.6.8-sarge-security: 
-2.4.27-sarge-security: 
+2.6.18-etch-security: ignored "no upstream fix"
+2.6.24-etchnhalf-security: ignored "no upstream fix"
 2.6.15-dapper-security: 
 2.6.17-edgy-security: ignored (EOL)
 2.6.20-feisty-security: 
diff --git a/active/CVE-2008-0598 b/active/CVE-2008-0598
index e03eb5f4..ced57a4c 100644
--- a/active/CVE-2008-0598
+++ b/active/CVE-2008-0598
@@ -7,10 +7,10 @@ References:
 Ubuntu-Description: 
 Notes: 
 Bugs: 490910
-upstream: needed
+upstream: pending (2.6.27-rc1)
 linux-2.6: needed
-2.6.18-etch-security: needed
-2.6.24-etchnhalf-security: needed
+2.6.18-etch-security: pending (2.6.18.dfsg.1-18etch7) [bugfix/x86-add-copy_user_handle_tail.patch, x86-fix-copy_user.patch]
+2.6.24-etchnhalf-security: pending (2.6.24-6~etchnhalf.4) [bugfix/x86-add-copy_user_handle_tail.patch, x86-fix-copy_user.patch]
 2.6.15-dapper-security: 
 2.6.20-feisty-security: 
 2.6.22-gutsy-security: 
diff --git a/active/CVE-2008-2750 b/active/CVE-2008-2750
index 0e745fab..331ee7f1 100644
--- a/active/CVE-2008-2750
+++ b/active/CVE-2008-2750
@@ -10,10 +10,10 @@ Ubuntu-Description:
 Notes: 
  kees> linux-2.6: 6b6707a50c7598a83820077393f8823ab791abf8
 Bugs: 
-upstream: 
-linux-2.6: 
-2.6.18-etch-security: N/A
-2.6.24-etchnhalf-security:
+upstream: released (2.6.26-rc6)
+linux-2.6: released (2.6.26-rc6)
+2.6.18-etch-security: N/A "code added after 2.6.18"
+2.6.24-etchnhalf-security: pending (2.6.24-6~etchnhalf.4) "bugfix/l2tp-pppol2tp_recvmsg-corruption.patch"
 2.6.15-dapper-security: N/A
 2.6.20-feisty-security: N/A
 2.6.22-gutsy-security: N/A
diff --git a/active/CVE-2008-2812 b/active/CVE-2008-2812
index e2992bda..7715d8e2 100644
--- a/active/CVE-2008-2812
+++ b/active/CVE-2008-2812
@@ -4,10 +4,10 @@ References:
 Ubuntu-Description: 
 Notes: 
 Bugs: 
-upstream: 
-linux-2.6: 
+upstream: released (2.6.25.10)
+linux-2.6: released (2.6.25-7) [bugfix/all/stable/2.6.25.10.patch]
 2.6.18-etch-security: pending (2.6.18.dfsg.1-18etch7) [bugfix/tty-fix-for-tty-operations-bugs.patch]
-2.6.24-etchnhalf-security:
+2.6.24-etchnhalf-security: pending (2.6.24-6~etchnhalf.4) [bugfix/tty-fix-for-tty-operations-bugs.patch]
 2.6.15-dapper-security: 
 2.6.20-feisty-security: 
 2.6.22-gutsy-security: 
diff --git a/active/CVE-2008-2931 b/active/CVE-2008-2931
index ad1c115a..a6f2cbcc 100644
--- a/active/CVE-2008-2931
+++ b/active/CVE-2008-2931
@@ -8,7 +8,7 @@ Notes:
 Bugs: 
 upstream: released (2.6.21)
 linux-2.6: N/A
-2.6.18-etch-security: needed
+2.6.18-etch-security: pending (2.6.18.dfsg.1-18etch7) [bugfix/check-privileges-before-setting-mount-propagation.patch]
 2.6.24-etchnhalf-security: N/A
 2.6.15-dapper-security: 
 2.6.20-feisty-security: 
diff --git a/active/CVE-2006-6058 b/retired/CVE-2006-6058
index 61723554..61723554 100644
--- a/active/CVE-2006-6058
+++ b/retired/CVE-2006-6058
diff --git a/active/CVE-2006-7229 b/retired/CVE-2006-7229
index 07677618..07677618 100644
--- a/active/CVE-2006-7229
+++ b/retired/CVE-2006-7229
diff --git a/active/CVE-2007-0004 b/retired/CVE-2007-0004
index e0c5d132..e0c5d132 100644
--- a/active/CVE-2007-0004
+++ b/retired/CVE-2007-0004
diff --git a/active/CVE-2007-2242 b/retired/CVE-2007-2242
index b656dac1..b656dac1 100644
--- a/active/CVE-2007-2242
+++ b/retired/CVE-2007-2242
diff --git a/active/CVE-2007-3104 b/retired/CVE-2007-3104
index a3b6a8f9..a3b6a8f9 100644
--- a/active/CVE-2007-3104
+++ b/retired/CVE-2007-3104
diff --git a/active/CVE-2007-3513 b/retired/CVE-2007-3513
index 9bd02927..9bd02927 100644
--- a/active/CVE-2007-3513
+++ b/retired/CVE-2007-3513
diff --git a/active/CVE-2007-3848 b/retired/CVE-2007-3848
index 05540cad..05540cad 100644
--- a/active/CVE-2007-3848
+++ b/retired/CVE-2007-3848
diff --git a/active/CVE-2007-4130 b/retired/CVE-2007-4130
index 4f40c522..44ab1fdc 100644
--- a/active/CVE-2007-4130
+++ b/retired/CVE-2007-4130
@@ -10,7 +10,7 @@ Notes:
 Bugs: 
 upstream: 
 linux-2.6: 
-2.6.18-etch-security: ignored (2.6.18.dfsg.1-18etch2) "no known upstream fix"
+2.6.18-etch-security: N/A
 2.6.8-sarge-security: ignored (2.6.8-17sarge2) "no known upstream fix"
 2.4.27-sarge-security: ignored (2.4.27-10sarge6) "no known upstream fix"
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2007-4133 b/retired/CVE-2007-4133
index e1c71246..e1c71246 100644
--- a/active/CVE-2007-4133
+++ b/retired/CVE-2007-4133
diff --git a/active/CVE-2007-4571 b/retired/CVE-2007-4571
index 46103f5b..46103f5b 100644
--- a/active/CVE-2007-4571
+++ b/retired/CVE-2007-4571
diff --git a/active/CVE-2007-4997 b/retired/CVE-2007-4997
index d2b9c569..d2b9c569 100644
--- a/active/CVE-2007-4997
+++ b/retired/CVE-2007-4997
diff --git a/active/CVE-2007-5087 b/retired/CVE-2007-5087
index a8c29f75..f3fe237a 100644
--- a/active/CVE-2007-5087
+++ b/retired/CVE-2007-5087
@@ -11,7 +11,7 @@ Bugs:
  dannf> Vulnerable code was added to 2.4 in:
    http://linux.bkbits.net:8080/linux-2.4/?PAGE=gnupatch&REV=1.1448.44.17
   which was after 2.4.27
- dannf> The commit notes that 2.6 isn't vulnerable because teh arp entry is
+ dannf> The commit notes that 2.6 isn't vulnerable because the arp entry is
   handled in clip.c. I've verified this is true for both 2.6.8 and 2.6.18.
 upstream: released (2.4.36-pre2)
 linux-2.6: N/A
diff --git a/active/CVE-2007-5093 b/retired/CVE-2007-5093
index f18d7942..f18d7942 100644
--- a/active/CVE-2007-5093
+++ b/retired/CVE-2007-5093
diff --git a/active/CVE-2007-5494 b/retired/CVE-2007-5494
index 3c390e0e..3c390e0e 100644
--- a/active/CVE-2007-5494
+++ b/retired/CVE-2007-5494
diff --git a/active/CVE-2007-5500 b/retired/CVE-2007-5500
index 9d5ad045..9d5ad045 100644
--- a/active/CVE-2007-5500
+++ b/retired/CVE-2007-5500
diff --git a/active/CVE-2007-5904 b/retired/CVE-2007-5904
index d1fe8b66..d1fe8b66 100644
--- a/active/CVE-2007-5904
+++ b/retired/CVE-2007-5904
diff --git a/active/CVE-2007-5938 b/retired/CVE-2007-5938
index 43b3bdad..43b3bdad 100644
--- a/active/CVE-2007-5938
+++ b/retired/CVE-2007-5938
diff --git a/active/CVE-2007-5966 b/retired/CVE-2007-5966
index cfcaf9cb..cfcaf9cb 100644
--- a/active/CVE-2007-5966
+++ b/retired/CVE-2007-5966
diff --git a/active/CVE-2007-6063 b/retired/CVE-2007-6063
index 5187ccc6..5187ccc6 100644
--- a/active/CVE-2007-6063
+++ b/retired/CVE-2007-6063
diff --git a/active/CVE-2007-6151 b/retired/CVE-2007-6151
index 9e2973e4..9e2973e4 100644
--- a/active/CVE-2007-6151
+++ b/retired/CVE-2007-6151
diff --git a/active/CVE-2007-6206 b/retired/CVE-2007-6206
index 280260a8..280260a8 100644
--- a/active/CVE-2007-6206
+++ b/retired/CVE-2007-6206
diff --git a/active/CVE-2007-6417 b/retired/CVE-2007-6417
index 63149b02..63149b02 100644
--- a/active/CVE-2007-6417
+++ b/retired/CVE-2007-6417
diff --git a/active/CVE-2007-6694 b/retired/CVE-2007-6694
index 15e09d05..15e09d05 100644
--- a/active/CVE-2007-6694
+++ b/retired/CVE-2007-6694
diff --git a/active/CVE-2007-6712 b/retired/CVE-2007-6712
index c07bae11..c07bae11 100644
--- a/active/CVE-2007-6712
+++ b/retired/CVE-2007-6712
diff --git a/active/CVE-2008-0001 b/retired/CVE-2008-0001
index 1539005c..1539005c 100644
--- a/active/CVE-2008-0001
+++ b/retired/CVE-2008-0001
diff --git a/active/CVE-2008-0007 b/retired/CVE-2008-0007
index da26c1d3..3f588fa9 100644
--- a/active/CVE-2008-0007
+++ b/retired/CVE-2008-0007
@@ -13,7 +13,7 @@ Bugs:
 upstream: released (2.6.24.1)
 linux-2.6: released (2.6.24-4)
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch2) [bugfix/mmap-VM_DONTEXPAND.patch]
-2.6.24-etchnhalf-security: needed
+2.6.24-etchnhalf-security: released (2.6.24-4) [bugfix/all/stable/2.6.24.1.patch]
 2.6.8-sarge-security: released (2.6.8-17sarge1) [mmap-VM_DONTEXPAND.dpatch]
 2.4.27-sarge-security: released (2.4.27-10sarge6) [264_mmap-VM_DONTEXPAND.diff]
 2.6.15-dapper-security: released (2.6.15-52.67)
diff --git a/active/CVE-2008-0009 b/retired/CVE-2008-0009
index 5765986c..054dc29f 100644
--- a/active/CVE-2008-0009
+++ b/retired/CVE-2008-0009
@@ -7,7 +7,7 @@ Bugs:
 upstream: released (2.6.24.1)
 linux-2.6: released (2.6.24-4)
 2.6.18-etch-security: N/A
-2.6.24-etchnhalf-security: 2.6.24-4
+2.6.24-etchnhalf-security: released (2.6.24-4) [bugfix/all/stable/2.6.24.1.patch]
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2008-0010 b/retired/CVE-2008-0010
index d467769c..5384b024 100644
--- a/active/CVE-2008-0010
+++ b/retired/CVE-2008-0010
@@ -7,7 +7,7 @@ Bugs:
 upstream: released (2.6.24.1)
 linux-2.6: released (2.6.24-4)
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch1)
-2.6.24-etchnhalf-security: 2.6.24-4
+2.6.24-etchnhalf-security: released (2.6.24-4) [bugfix/all/stable/2.6.24.1.patch]
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2008-0163 b/retired/CVE-2008-0163
index 8c844778..77eddcc3 100644
--- a/active/CVE-2008-0163
+++ b/retired/CVE-2008-0163
@@ -1,4 +1,4 @@
-Candidate: 
+Candidate: CVE-2008-0163
 Description: 
 References: 
 Ubuntu-Description: 
@@ -7,7 +7,7 @@ Bugs:
 upstream: N/A
 linux-2.6: 
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch1)
-2.6.24-etchnhalf-security:
+2.6.24-etchnhalf-security: N/A "no vserver support"
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2008-0352 b/retired/CVE-2008-0352
index 24ac94b8..24ac94b8 100644
--- a/active/CVE-2008-0352
+++ b/retired/CVE-2008-0352
diff --git a/active/CVE-2008-0600 b/retired/CVE-2008-0600
index e655dc9a..23a12e99 100644
--- a/active/CVE-2008-0600
+++ b/retired/CVE-2008-0600
@@ -12,7 +12,7 @@ Bugs:
 upstream: released (2.6.24.2)
 linux-2.6: released (2.6.24-4)
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch1)
-2.6.24-etchnhalf-security: 2.6.24-4
+2.6.24-etchnhalf-security: released (2.6.24-4) [bugfix/all/stable/2.6.24.2.patch]
 2.6.8-sarge-security: N/A
 2.4.27-sarge-security: N/A
 2.6.15-dapper-security: N/A
diff --git a/active/CVE-2008-1294 b/retired/CVE-2008-1294
index 773d05c9..9f6ac748 100644
--- a/active/CVE-2008-1294
+++ b/retired/CVE-2008-1294
@@ -19,9 +19,7 @@ Bugs:
 upstream: 
 linux-2.6: 
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch2) [bugfix/RLIMIT_CPU-earlier-checking.patch]
-2.6.24-etchnhalf-security:
-2.6.8-sarge-security: 
-2.4.27-sarge-security: 
+2.6.24-etchnhalf-security: N/A
 2.6.15-dapper-security: released (2.6.15-52.67)
 2.6.17-edgy-security: ignored (EOL)
 2.6.20-feisty-security: released (2.6.20-17.36)
diff --git a/active/CVE-2008-1375 b/retired/CVE-2008-1375
index 3cc4d4f5..27075c84 100644
--- a/active/CVE-2008-1375
+++ b/retired/CVE-2008-1375
@@ -12,10 +12,10 @@ Notes:
  kees> ABI changer due to header addition?
  kees> http://svn.debian.org/wsvn/kernel/dists/etch-security/linux-2.6/debian/patches/bugfix/dnotify-race-avoid-abi-change.patch?op=file&rev=0&sc=0
 Bugs: 
-upstream: pending (2.6.26-rc1)
-linux-2.6: needed
+upstream: released (2.6.26-rc1)
+linux-2.6: released (2.6.25-2)
 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch2) [bugfix/dnotify-race.patch]
-2.6.24-etchnhalf-security: needed
+2.6.24-etchnhalf-security: released (2.6.24-6~etchnhalf.2) [bugfix/all/stable/2.6.24.6.patch]
 2.6.15-dapper-security: released (2.6.15-52.67)
 2.6.17-edgy-security: ignored (EOL)
 2.6.20-feisty-security: released (2.6.20-17.36)
diff --git a/active/CVE-2008-1615 b/retired/CVE-2008-1615
index 9c297dd3..9c297dd3 100644
--- a/active/CVE-2008-1615
+++ b/retired/CVE-2008-1615
diff --git a/active/CVE-2008-1669 b/retired/CVE-2008-1669
index 900a997a..900a997a 100644
--- a/active/CVE-2008-1669
+++ b/retired/CVE-2008-1669
diff --git a/active/CVE-2008-1675 b/retired/CVE-2008-1675
index 0e3f1637..0e3f1637 100644
--- a/active/CVE-2008-1675
+++ b/retired/CVE-2008-1675
diff --git a/active/block-all-signals-race b/retired/block-all-signals-race
index bfe3285b..bfe3285b 100644
--- a/active/block-all-signals-race
+++ b/retired/block-all-signals-race