[Secure-testing-commits] r31768 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-01-27 20:37:42 +0000 (Tue, 27 Jan 2015)
New Revision: 31768

Modified:
   data/CVE/list
Log:
Add CVE-2014-8612/kfreebsd

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-27 20:31:04 UTC (rev 31767)
+++ data/CVE/list	2015-01-27 20:37:42 UTC (rev 31768)
@@ -6083,8 +6083,16 @@
 	RESERVED
 CVE-2014-8613
 	RESERVED
-CVE-2014-8612
+CVE-2014-8612 [SCTP kernel mem disclosure/corruption]
 	RESERVED
+	[experimental] - kfreebsd-11 <unfixed>
+	- kfreebsd-10 <unfixed> (bug #776415)
+	- kfreebsd-9 <removed>
+	[wheezy] - kfreebsd-9 9.0-10+deb70.8
+	NOTE: kfreebsd-9/9.0-10+deb70.8 disabled SCTP protocol
+	- kfreebsd-8 <removed>
+	[wheezy] - kfreebsd-8 <no-dsa> (kfreebsd-8 only a test kernel, can be fixed in a point release)
+	NOTE: https://security.FreeBSD.org/advisories/FreeBSD-SA-15:02.kmem.asc
 CVE-2014-8611
 	RESERVED
 CVE-2014-8610 (AndroidManifest.xml in Android before 5.0.0 does not require the ...)