CVE-2013-2147 cpqarray/cciss: information leak via ioctl (rhbz 971242 971249)

This commit is contained in:
Josh Boyer 2013-06-06 08:20:24 -04:00
commit fa81d1f832
2 changed files with 36 additions and 0 deletions

View file

@ -745,6 +745,9 @@ Patch25026: Modify-UEFI-anti-bricking-code.patch
#CVE-2013-2140 rhbz 971146 971148
Patch25031: xen-blkback-Check-device-permissions-before-allowing.patch
#CVE-2013-2147 rhbz 971242 971249
Patch25032: cve-2013-2147-ciss-info-leak.patch
# END OF PATCH DEFINITIONS
%endif
@ -1433,6 +1436,9 @@ ApplyPatch Modify-UEFI-anti-bricking-code.patch
#CVE-2013-2140 rhbz 971146 971148
ApplyPatch xen-blkback-Check-device-permissions-before-allowing.patch
#CVE-2013-2147 rhbz 971242 971249
ApplyPatch cve-2013-2147-ciss-info-leak.patch
# END OF PATCH APPLICATIONS
%endif
@ -2238,6 +2244,9 @@ fi
# ||----w |
# || ||
%changelog
* Thu Jun 06 2013 Josh Boyer <jwboyer@redhat.com>
- CVE-2013-2147 cpqarray/cciss: information leak via ioctl (rhbz 971242 971249)
* Wed Jun 05 2013 Josh Boyer <jwboyer@redhat.com>
- CVE-2013-2140 xen: blkback: insufficient permission checks for BLKIF_OP_DISCARD (rhbz 971146 971148)