[Secure-testing-commits] r32659 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-05 20:32:30 +0000 (Thu, 05 Mar 2015)
New Revision: 32659

Modified:
   data/CVE/list
Log:
Add CVE-2015-0274/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-05 19:35:40 UTC (rev 32658)
+++ data/CVE/list	2015-03-05 20:32:30 UTC (rev 32659)
@@ -7259,8 +7259,12 @@
 	- linux <unfixed>
 	- linux-2.6 <removed>
 	NOTE: Proposed upstream patch: http://www.spinics.net/lists/linux-ext4/msg47193.html
-CVE-2015-0274
+CVE-2015-0274 [xfs: replacing remote attributes memory corruption]
 	RESERVED
+	- linux 3.11.5-1
+	- linux-2.6 <not-affected> (introduced in v3.11-rc1)
+	NOTE: Fixed by https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 (v3.15-rc5)
+	NOTE: Introduced by https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e461fcb194172b3f709e0b478d2ac1bdac7ab9a3 (v3.11-rc1)
 CVE-2015-0273 [use after free vulnerability in unserialize() with DateTimeZone]
 	RESERVED
 	- php5 5.6.6+dfsg-1