[Secure-testing-commits] r31820 - data/CVE

Thu Jan 29 15:24:59 UTC 2015

Author: carnil
Date: 2015-01-29 15:24:59 +0000 (Thu, 29 Jan 2015)
New Revision: 31820

Modified:
   data/CVE/list
Log:
Add temporary item for glibc issue, CVE is requested on oss-security

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-01-29 15:13:32 UTC (rev 31819)
+++ data/CVE/list	2015-01-29 15:24:59 UTC (rev 31820)
@@ -1,3 +1,9 @@
+CVE-2015-XXXX [Invalid-free when using getaddrinfo()]
+	- glibc 2.19-4
+	- eglibc 2.17-2
+	NOTE: CVE Request: http://seclists.org/oss-sec/2015/q1/306
+	NOTE: Upstream fix: https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=2e96f1c7
+	NOTE: 2.19-4 first version after the eglibc -> glibc rename which was in unstable
 CVE-2015-1421 [net: sctp: slab corruption from use after free on INIT collisions]
 	- linux <unfixed>
 	- linux-2.6 <removed>


