[Secure-testing-commits] r32273 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-02-17 06:13:21 +0000 (Tue, 17 Feb 2015)
New Revision: 32273

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-1573/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-17 06:05:35 UTC (rev 32272)
+++ data/CVE/list	2015-02-17 06:13:21 UTC (rev 32273)
@@ -377,9 +377,10 @@
 CVE-2015-1573 [nft flush ruleset crashes kernel]
 	RESERVED
 	- linux <unfixed>
-	[wheezy] - linux <not-affected> (nftables introduced in 3.13)
-	- linux-2.6 <not-affected> (nftables introduced in 3.13)
+	[wheezy] - linux <not-affected> (nftables introduced in 3.13 and corresponding vulnerable code in v3.18-rc1)
+	- linux-2.6 <not-affected> (nftables introduced in 3.13 and corresponding  vulnerable code in v3.18-rc1)
 	NOTE: Fixed by https://git.kernel.org/cgit/linux/kernel/git/pablo/nf.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac (v3.19-rc5)
+	NOTE: Introduced by http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9ac12ef099707f405d7478009564302d7ed8393 (v3.18-rc1)
 	NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=91441
 CVE-2015-XXXX [XSS]
 	- mantis <removed>