[Secure-testing-commits] r30863 - data/CVE

Sat Dec 20 16:40:17 UTC 2014

Author: carnil
Date: 2014-12-20 16:40:17 +0000 (Sat, 20 Dec 2014)
New Revision: 30863

Modified:
   data/CVE/list
Log:
Update entry for CVE-2014-6885

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-12-20 13:17:15 UTC (rev 30862)
+++ data/CVE/list	2014-12-20 16:40:17 UTC (rev 30863)
@@ -25644,7 +25644,8 @@
 CVE-2012-6608 (Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in ...)
 	NOT-FOR-US: Elastix
 CVE-2013-6885 (The microcode on AMD 16h 00h through 0Fh processors does not properly ...)
-	- amd64-microcode <undetermined>
+	- amd64-microcode <unfixed>
+	NOTE: Workaround in Linux via https://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=3b56496865f9f7d9bcb2f93b44c63f274f08e3b6 (v3.14-rc1)
 	NOTE: http://www.openwall.com/lists/oss-security/2013/11/28/1
 CVE-2013-6857
 	RESERVED


