From 1c12ee4ee9dac6c9573cf1bcc8ba5f474cd694bf Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Sun, 31 Jan 2010 11:37:57 +0000 Subject: ignore two ancient issues git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@1687 e094ebfe-e918-0410-adfb-c712417f3574 --- active/CVE-2006-6921 | 24 ------------------------ active/CVE-2006-7051 | 33 --------------------------------- ignored/CVE-2006-6921 | 24 ++++++++++++++++++++++++ ignored/CVE-2006-7051 | 33 +++++++++++++++++++++++++++++++++ 4 files changed, 57 insertions(+), 57 deletions(-) delete mode 100644 active/CVE-2006-6921 delete mode 100644 active/CVE-2006-7051 create mode 100644 ignored/CVE-2006-6921 create mode 100644 ignored/CVE-2006-7051 diff --git a/active/CVE-2006-6921 b/active/CVE-2006-6921 deleted file mode 100644 index 3a3ee39ac..000000000 --- a/active/CVE-2006-6921 +++ /dev/null @@ -1,24 +0,0 @@ -Candidate: CVE-2006-6921 -References: - http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/0980.html - http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/1021.html -Description: - Unspecified versions of the Linux kernel allows local users to cause - a denial of service (unrecoverable zombie process) via a program with - certain instructions that prevent init from properly reaping a child - whose parent has died. -Ubuntu-Description: -Notes: - 2.4 behaves correctly - dannf> unaware of an upstream fix -Bugs: -upstream: -linux-2.6: ignored "no upstream fix" -2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix" -2.6.24-etch-security: ignored "no upstream fix" -2.6.26-lenny-security: ignored -2.6.8-sarge-security: ignored (2.6.8-16sarge7) -2.4.27-sarge-security: N/A -2.6.15-dapper-security: ignored -2.6.17-edgy-security: ignored - no upstream patch -2.6.20-feisty-security: ignored diff --git a/active/CVE-2006-7051 b/active/CVE-2006-7051 deleted file mode 100644 index f23857b8e..000000000 --- a/active/CVE-2006-7051 +++ /dev/null @@ -1,33 +0,0 @@ -Candidate: CVE-2006-7051 -References: - BUGTRAQ:20060404 Linux Kernel Local DoS vulnerability. - URL:http://www.securityfocus.com/archive/1/archive/1/430278/30/5790/threaded - MILW0RM:1657 - URL:http://www.milw0rm.com/exploits/1657 - XF:linux-systimercreate-dos(25712) - URL:http://xforce.iss.net/xforce/xfdb/25712 -Description: - The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x - allows local users to cause a denial of service (memory consumption) and - possibly bypass memory limits or cause other processes to be killed by - creating a large number of posix timers, which are allocated in kernel - memory but are not treated as part of the process' memory. -Ubuntu-Description: -Notes: - dannf> Debian should probably "fix" this by suggesting a limit (ulimit -i) - on the number of pending signals - kees> Pending signals limit is now set by pam 0.99.x. - jmm> d02479bdeb1c9b037892061cdcf4e730183391fa - dannf> The milw0rm exploit seems to still work on 2.6.24, so I don't think - the d02479b changeset changed this behavior. -Bugs: -upstream: released (2.6.23-rc4) -linux-2.6: released (2.6.23-1) -2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream patch" -2.6.24-etch-security: ignored "no upstream patch" -2.6.26-lenny-security: ignored "no upstream patch" -2.6.8-sarge-security: ignored (2.6.8-17sarge1) "no upstream patch" -2.4.27-sarge-security: N/A "No posix-timers.c" -2.6.15-dapper-security: ignore (no upstream patch) -2.6.17-edgy-security: ignore (no upstream patch) -2.6.20-feisty: ignore (no upstream patch) diff --git a/ignored/CVE-2006-6921 b/ignored/CVE-2006-6921 new file mode 100644 index 000000000..3a3ee39ac --- /dev/null +++ b/ignored/CVE-2006-6921 @@ -0,0 +1,24 @@ +Candidate: CVE-2006-6921 +References: + http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/0980.html + http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/1021.html +Description: + Unspecified versions of the Linux kernel allows local users to cause + a denial of service (unrecoverable zombie process) via a program with + certain instructions that prevent init from properly reaping a child + whose parent has died. +Ubuntu-Description: +Notes: + 2.4 behaves correctly + dannf> unaware of an upstream fix +Bugs: +upstream: +linux-2.6: ignored "no upstream fix" +2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream fix" +2.6.24-etch-security: ignored "no upstream fix" +2.6.26-lenny-security: ignored +2.6.8-sarge-security: ignored (2.6.8-16sarge7) +2.4.27-sarge-security: N/A +2.6.15-dapper-security: ignored +2.6.17-edgy-security: ignored - no upstream patch +2.6.20-feisty-security: ignored diff --git a/ignored/CVE-2006-7051 b/ignored/CVE-2006-7051 new file mode 100644 index 000000000..f23857b8e --- /dev/null +++ b/ignored/CVE-2006-7051 @@ -0,0 +1,33 @@ +Candidate: CVE-2006-7051 +References: + BUGTRAQ:20060404 Linux Kernel Local DoS vulnerability. + URL:http://www.securityfocus.com/archive/1/archive/1/430278/30/5790/threaded + MILW0RM:1657 + URL:http://www.milw0rm.com/exploits/1657 + XF:linux-systimercreate-dos(25712) + URL:http://xforce.iss.net/xforce/xfdb/25712 +Description: + The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x + allows local users to cause a denial of service (memory consumption) and + possibly bypass memory limits or cause other processes to be killed by + creating a large number of posix timers, which are allocated in kernel + memory but are not treated as part of the process' memory. +Ubuntu-Description: +Notes: + dannf> Debian should probably "fix" this by suggesting a limit (ulimit -i) + on the number of pending signals + kees> Pending signals limit is now set by pam 0.99.x. + jmm> d02479bdeb1c9b037892061cdcf4e730183391fa + dannf> The milw0rm exploit seems to still work on 2.6.24, so I don't think + the d02479b changeset changed this behavior. +Bugs: +upstream: released (2.6.23-rc4) +linux-2.6: released (2.6.23-1) +2.6.18-etch-security: ignored (2.6.18.dfsg.1-13etch6) "no upstream patch" +2.6.24-etch-security: ignored "no upstream patch" +2.6.26-lenny-security: ignored "no upstream patch" +2.6.8-sarge-security: ignored (2.6.8-17sarge1) "no upstream patch" +2.4.27-sarge-security: N/A "No posix-timers.c" +2.6.15-dapper-security: ignore (no upstream patch) +2.6.17-edgy-security: ignore (no upstream patch) +2.6.20-feisty: ignore (no upstream patch) -- cgit v1.2.3