[Secure-testing-commits] r29767 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Oct 31 14:29:30 UTC 2014


Author: carnil
Date: 2014-10-31 14:29:30 +0000 (Fri, 31 Oct 2014)
New Revision: 29767

Modified:
   data/CVE/list
Log:
Add information for CVE-2014-7207/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-31 14:21:15 UTC (rev 29766)
+++ data/CVE/list	2014-10-31 14:29:30 UTC (rev 29767)
@@ -2902,8 +2902,15 @@
 	RESERVED
 CVE-2014-7208
 	RESERVED
-CVE-2014-7207
+CVE-2014-7207 [Regression introduced in 3.2.63]
 	RESERVED
+	- linux <not-affected> (Issue specific to 3.2.x)
+	NOTE: In 3.2.x introduced with https://git.kernel.org/cgit/linux/kernel/git/bwh/linux-3.2.y.git/commit/?h=linux-3.2.y&id=64b5c251d5b2cee4a0f697bfb90d79263f6dd517
+	NOTE: which is a backport of https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73f156a6e8c1074ac6327e0abd1169e95eb66463 (v3.16-rc1)
+	NOTE: The missing commit for the 3.2.x branch was applied already earlier (before v3.16) mainline:
+	NOTE: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=916e4cf46d0204806c062c8c6c4d1f633852c5b6 (v3.14-rc6)
+	NOTE: http://bugs.debian.org/766195
+	- linux-2.6 <not-affected> (Issue specific to 3.2.x)
 CVE-2014-7206 (The changelog command in Apt before 1.0.9.2 allows local users to ...)
 	{DSA-3048-1}
 	- apt 1.0.9.2 (bug #763780)




More information about the Secure-testing-commits mailing list