[Secure-testing-commits] r33852 - in data: CVE DSA
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Sun Apr 26 08:47:10 UTC 2015
Author: carnil
Date: 2015-04-26 08:47:10 +0000 (Sun, 26 Apr 2015)
New Revision: 33852
Modified:
data/CVE/list
data/DSA/list
Log:
Workaround issue with CVE-2015-3332 in tracker showing wheezy as unfixed
When having an entry for wheezy as well in data/DSA/list for one item,
but having it <not-affected> in data/CVE/list the entry in DSA list
invalidates the not-affected status. Woraround by moving the fixed
version for jessie directly in CVE/list.
This though has the unpleasend side effect that CVE-2015-3332 will not
be shown in https://security-tracker.debian.org/tracker/DSA-3237-1 but
at least will be correctly in the mail and in the generated webpage.
TODO: check if this can be fixed somehow on security-tracker side.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-04-26 08:21:20 UTC (rev 33851)
+++ data/CVE/list 2015-04-26 08:47:10 UTC (rev 33852)
@@ -886,6 +886,7 @@
CVE-2015-3332 [TCP Fast Open local DoS]
RESERVED
- linux 3.16.7-ckt9-3 (bug #782515)
+ [jessie] - linux 3.16.7-ckt9-3~deb8u1
[wheezy] - linux <not-affected> (TCP Fast Open introduced in v3.6-rc1)
- linux-2.6 <not-affected> (TCP Fast Open introduced in v3.6-rc1)
NOTE: http://www.openwall.com/lists/oss-security/2015/04/14/14
Modified: data/DSA/list
===================================================================
--- data/DSA/list 2015-04-26 08:21:20 UTC (rev 33851)
+++ data/DSA/list 2015-04-26 08:47:10 UTC (rev 33852)
@@ -1,5 +1,5 @@
[26 Apr 2015] DSA-3237-1 linux - security update
- {CVE-2014-8159 CVE-2014-9715 CVE-2015-2041 CVE-2015-2042 CVE-2015-2150 CVE-2015-2830 CVE-2015-2922 CVE-2015-3331 CVE-2015-3332 CVE-2015-3339}
+ {CVE-2014-8159 CVE-2014-9715 CVE-2015-2041 CVE-2015-2042 CVE-2015-2150 CVE-2015-2830 CVE-2015-2922 CVE-2015-3331 CVE-2015-3339}
[wheezy] - linux 3.2.68-1+deb7u1
[jessie] - linux 3.16.7-ckt9-3~deb8u1
[25 Apr 2015] DSA-3236-1 libreoffice - security update
More information about the Secure-testing-commits
mailing list