[Secure-testing-commits] r36893 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-29 16:01:33 +0000 (Tue, 29 Sep 2015)
New Revision: 36893

Modified:
   data/CVE/list
Log:
Add new lxc issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-29 15:04:53 UTC (rev 36892)
+++ data/CVE/list	2015-09-29 16:01:33 UTC (rev 36893)
@@ -16814,8 +16814,12 @@
 	NOT-FOR-US: simplestreams
 CVE-2015-1336
 	RESERVED
-CVE-2015-1335
+CVE-2015-1335 [directory traversal]
 	RESERVED
+	- lxc <unfixed>
+	NOTE: https://launchpad.net/bugs/1476662
+	NOTE: https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be
+	NOTE: https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html
 CVE-2015-1334 (attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a ...)
 	{DSA-3317-1}
 	- lxc 1:1.0.7-4 (bug #793298)