[Secure-testing-commits] r36841 - data/CVE

[Guido Guenther]

Author: agx
Date: 2015-09-26 14:55:48 +0000 (Sat, 26 Sep 2015)
New Revision: 36841

Modified:
   data/CVE/list
Log:
Some updates for glibc issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-26 13:23:26 UTC (rev 36840)
+++ data/CVE/list	2015-09-26 14:55:48 UTC (rev 36841)
@@ -1269,6 +1269,7 @@
 	- glibc <unfixed>
 	- eglibc <removed>
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/09/05/8
+	NOTE: Upstream bug https://sourceware.org/bugzilla/show_bug.cgi?id=18928
 	TODO: check
 CVE-2015-6815 [Qemu: net: e1000 infinite loop issue]
 	RESERVED
@@ -25190,6 +25191,7 @@
 	- eglibc <removed> (low)
 	[wheezy] - eglibc <no-dsa> (Minor issue)
 	[squeeze] - eglibc <no-dsa> (Minor issue)
+	NOTE: Patch: https://sourceware.org/git/?p=glibc.git;a=commit;h=03d2730b44cc2236318fd978afa2651753666c55
 CVE-2014-8120 (The agent in Thermostat before 1.0.6, when using unspecified ...)
 	NOT-FOR-US: Thermostat Hotspot instrumentation
 CVE-2014-8119 [augeas path expression injection via interface name]
@@ -59391,6 +59393,7 @@
 	[squeeze] - eglibc <no-dsa> (Minor issue)
 	[wheezy] - eglibc <no-dsa> (Minor issue)
 	[jessie] - glibc <no-dsa> (Minor issue)
+	NOTE: Patch: https://sourceware.org/git/?p=glibc.git;a=commit;h=e4608715e6e1dd2adc91982fd151d5ba4f761d69
 CVE-2013-2206 (The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in ...)
 	{DSA-2766-1}
 	- linux-2.6 <removed>