From cffb363c568e15bb95549d0c5746068cca9c94bf Mon Sep 17 00:00:00 2001
From: dann frazier <dannf@debian.org>
Date: Sun, 20 Jul 2008 21:58:00 +0000
Subject: Debian updates; retire several issues

git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@1197 e094ebfe-e918-0410-adfb-c712417f3574
---
 retired/CVE-2008-1375 | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 retired/CVE-2008-1375

(limited to 'retired/CVE-2008-1375')

diff --git a/retired/CVE-2008-1375 b/retired/CVE-2008-1375
new file mode 100644
index 000000000..27075c84f
--- /dev/null
+++ b/retired/CVE-2008-1375
@@ -0,0 +1,23 @@
+Candidate: CVE-2008-1375
+Description: 
+ dnotify race
+References: 
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=214b7049a7929f03bbd2786aaef04b8b79db34e2
+Ubuntu-Description: 
+ A race condition was discovered between dnotify fcntl() and close() in
+ the kernel.  If a local attacker performed malicious dnotify requests,
+ they could cause memory consumption leading to a denial of service,
+ or possibly send arbitrary signals to any process.
+Notes: 
+ kees> ABI changer due to header addition?
+ kees> http://svn.debian.org/wsvn/kernel/dists/etch-security/linux-2.6/debian/patches/bugfix/dnotify-race-avoid-abi-change.patch?op=file&rev=0&sc=0
+Bugs: 
+upstream: released (2.6.26-rc1)
+linux-2.6: released (2.6.25-2)
+2.6.18-etch-security: released (2.6.18.dfsg.1-18etch2) [bugfix/dnotify-race.patch]
+2.6.24-etchnhalf-security: released (2.6.24-6~etchnhalf.2) [bugfix/all/stable/2.6.24.6.patch]
+2.6.15-dapper-security: released (2.6.15-52.67)
+2.6.17-edgy-security: ignored (EOL)
+2.6.20-feisty-security: released (2.6.20-17.36)
+2.6.22-gutsy-security: released (2.6.22-15.54)
+2.6.24-hardy-security: released (2.6.24-19.34)
-- 
cgit v1.2.3