[Secure-testing-commits] r46732 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-03 06:31:48 +0000 (Sat, 03 Dec 2016)
New Revision: 46732

Modified:
   data/CVE/list
Log:
Update CVE-2012-6704

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-03 06:26:42 UTC (rev 46731)
+++ data/CVE/list	2016-12-03 06:31:48 UTC (rev 46732)
@@ -37804,9 +37804,9 @@
 	NOTE: http://sourceforge.net/p/gdcm/gdcm/ci/9cbca25ff7f20c432b61eb9f4cae43a946502b66/
 	NOTE: http://sourceforge.net/p/gdcm/gdcm/ci/e0dd1114c82d372dd905c029ddbee4e81ed01a89/
 CVE-2012-6704 [Linux: signed overflows for SO_SNDBUF and SO_RCVBUF that affects "before 3.5" kernels]
-	- linux 3.16.36-1+deb8u1
-	NOTE: TODO
-	NOTE: http://seclists.org/oss-sec/2016/q4/574
+	- linux <undetermined>
+	NOTE: Fixed by: https://git.kernel.org/linus/82981930125abfd39d7c8378a9cfdf5e1be2002b (v3.5-rc1)
+	TODO: find first version in unstable containing the fix
 CVE-2012-6703 (Integer overflow in the snd_compr_allocate_buffer function in ...)
 	- linux 3.8.11-1
 	[wheezy] - linux <not-affected> (Vulnerable code not present)