[Secure-testing-commits] r36587 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Sep 10 19:51:43 UTC 2015


Author: carnil
Date: 2015-09-10 19:51:43 +0000 (Thu, 10 Sep 2015)
New Revision: 36587

Modified:
   data/CVE/list
Log:
Add new temporary item which needs to be checked

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-10 19:47:57 UTC (rev 36586)
+++ data/CVE/list	2015-09-10 19:51:43 UTC (rev 36587)
@@ -1,3 +1,10 @@
+CVE-2015-XXXX [Use-after-free in Linux kernel with aufs mmap patch]
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/09/10/3
+	NOTE: http://sourceforge.net/p/aufs/mailman/message/34449209/
+	NOTE: For Linux kernel with aufs aufs3-mmap.patch or aufs4-mmap.patch mmap patch
+	TODO: check
 CVE-2015-6855 [commands which are illegal to sent to an ATAPI device should be rejected]
 	- qemu <unfixed>
 	- qemu-kvm <removed>




More information about the Secure-testing-commits mailing list