[Secure-testing-commits] r38534 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2015-12-27 04:51:10 +0000 (Sun, 27 Dec 2015)
New Revision: 38534

Modified:
   data/CVE/list
Log:
Fix affected packages for CVE-2015-855{0,1,2}

CVE-2015-8550 applies to both Linux and Xen drivers.

CVE-2015-855{1,2} apply only to Linux drivers.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-27 04:39:19 UTC (rev 38533)
+++ data/CVE/list	2015-12-27 04:51:10 UTC (rev 38534)
@@ -1123,19 +1123,24 @@
 	RESERVED
 CVE-2015-8552 [Linux pciback missing sanity checks leading to crash]
 	RESERVED
-	- xen <unfixed>
-	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
 	TODO: check
 CVE-2015-8551 [Linux pciback missing sanity checks leading to crash]
 	RESERVED
-	- xen <unfixed>
-	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
 	TODO: check
 CVE-2015-8550 [paravirtualized drivers incautious about shared memory contents]
 	RESERVED
+	- linux <unfixed>
+	- linux-2.6 <removed>
 	- xen <unfixed>
+	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-155.html
 	TODO: check