[Secure-testing-commits] r38535 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2015-12-27 05:26:54 +0000 (Sun, 27 Dec 2015)
New Revision: 38535

Modified:
   data/CVE/list
Log:
Add upstream commits and fixed version for CVE-2015-855{0,1,2} in linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-27 04:51:10 UTC (rev 38534)
+++ data/CVE/list	2015-12-27 05:26:54 UTC (rev 38535)
@@ -1122,27 +1122,39 @@
 CVE-2015-8553
 	RESERVED
 CVE-2015-8552 [Linux pciback missing sanity checks leading to crash]
-	RESERVED
-	- linux <unfixed>
+	- linux 4.4~rc6-1~exp1
 	- linux-2.6 <removed>
 	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
-	TODO: check
+	NOTE: https://git.kernel.org/linus/56441f3c8e5bd45aab10dd9f8c505dd4bec03b0d
+	NOTE: https://git.kernel.org/linus/5e0ce1455c09dd61d029b8ad45d82e1ac0b6c4c9
+	NOTE: https://git.kernel.org/linus/a396f3a210c3a61e94d6b87ec05a75d0be2a60d0
+	NOTE: https://git.kernel.org/linus/7cfb905b9638982862f0331b36ccaaca5d383b49
+	NOTE: https://git.kernel.org/linus/408fb0e5aa7fda0059db282ff58c3b2a4278baa0
 CVE-2015-8551 [Linux pciback missing sanity checks leading to crash]
-	RESERVED
-	- linux <unfixed>
+	- linux 4.4~rc6-1~exp1
 	- linux-2.6 <removed>
 	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
-	TODO: check
+	NOTE: https://git.kernel.org/linus/56441f3c8e5bd45aab10dd9f8c505dd4bec03b0d
+	NOTE: https://git.kernel.org/linus/5e0ce1455c09dd61d029b8ad45d82e1ac0b6c4c9
+	NOTE: https://git.kernel.org/linus/a396f3a210c3a61e94d6b87ec05a75d0be2a60d0
+	NOTE: https://git.kernel.org/linus/7cfb905b9638982862f0331b36ccaaca5d383b49
+	NOTE: https://git.kernel.org/linus/408fb0e5aa7fda0059db282ff58c3b2a4278baa0
 CVE-2015-8550 [paravirtualized drivers incautious about shared memory contents]
-	RESERVED
-	- linux <unfixed>
+	- linux 4.4~rc6-1~exp1
 	- linux-2.6 <removed>
 	- xen <unfixed>
 	[squeeze] - linux-2.6 <no-dsa> (Xen not supported in Squeeze LTS)
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-155.html
+	NOTE: https://git.kernel.org/linus/454d5d882c7e412b840e3c99010fe81a9862f6fb
+	NOTE: https://git.kernel.org/linus/0f589967a73f1f30ab4ac4dd9ce0bb399b4d6357
+	NOTE: https://git.kernel.org/linus/68a33bfd8403e4e22847165d149823a2e0e67c9c
+	NOTE: https://git.kernel.org/linus/1f13d75ccb806260079e0679d55d9253e370ec8a
+	NOTE: https://git.kernel.org/linus/18779149101c0dd43ded43669ae2a92d21b6f9cb
+	NOTE: https://git.kernel.org/linus/be69746ec12f35b484707da505c6c76ff06f97dc
+	NOTE: https://git.kernel.org/linus/8135cf8b092723dbfcc611fe6fdcb3a36c9951c5
 	TODO: check
 CVE-2015-8549
 	RESERVED