From be451cdb9081ddb875632258544772539357fc65 Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Fri, 28 May 2010 15:36:03 +0000 Subject: retire two issues git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@1842 e094ebfe-e918-0410-adfb-c712417f3574 --- retired/CVE-2009-4537 | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 retired/CVE-2009-4537 (limited to 'retired/CVE-2009-4537') diff --git a/retired/CVE-2009-4537 b/retired/CVE-2009-4537 new file mode 100644 index 00000000..fa025700 --- /dev/null +++ b/retired/CVE-2009-4537 @@ -0,0 +1,17 @@ +Candidate: CVE-2009-4537 +Description: + regression in r8169 driver +References: + http://www.openwall.com/lists/oss-security/2009/12/31/1 + http://marc.info/?t=126202986900002&r=1&w=2 +Notes: + the patch for this issue is partial; in the sense that any deviation from the + default settings opens the hole right back up. Ben Hutchings has volunteered + to work on a comprehensive fix if someone provides him the hardware. see: + http://lkml.org/lkml/2010/3/29/448 +Bugs: +upstream: released (2.6.34-rc3) [c0cd884a] +2.6.32-upstream-stable: released (2.6.32.12) +linux-2.6: released (2.6.32-11) [bugfix/all/net-r8169-improved-rx-length-check-errors.patch] +2.6.26-lenny-security: released (2.6.26-22lenny1) [bugfix/all/net-r8169-improved-rx-length-check-errors.patch, bugfix/all/r8169-offical-fix-for-cve-2009-4537-overlength-frame-dmas.patch] +2.6.32-squeeze-security: released (2.6.32-11) [bugfix/all/net-r8169-improved-rx-length-check-errors.patch] -- cgit v1.2.3