[Secure-testing-commits] r39754 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Thu Feb 18 08:16:31 UTC 2016
Author: carnil
Date: 2016-02-18 08:16:31 +0000 (Thu, 18 Feb 2016)
New Revision: 39754
Modified:
data/CVE/list
Log:
Mark four CVEs for linux as fixed in unstable
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-02-18 06:07:49 UTC (rev 39753)
+++ data/CVE/list 2016-02-18 08:16:31 UTC (rev 39754)
@@ -160,13 +160,13 @@
TODO: check
CVE-2016-2384 [Double-free in snd-usbmidi-lib triggered by invalid USB descriptor]
RESERVED
- - linux <unfixed>
+ - linux 4.4.2-1
- linux-2.6 <removed>
NOTE: Fixed by: https://git.kernel.org/linus/07d86ca93db7e5cdf4743564d98292042ec21af7 (v4.5-rc4)
NOTE: http://www.openwall.com/lists/oss-security/2016/02/14/2
CVE-2016-2383 [Incorrect branch fixups for eBPF allow arbitrary read]
RESERVED
- - linux <unfixed>
+ - linux 4.4.2-1
[jessie] - linux <not-affected> (Vulnerable code not present)
[wheezy] - linux <not-affected> (Vulnerable code not present)
- linux-2.6 <not-affected> (Vulnerable code not present)
@@ -469,7 +469,7 @@
NOT-FOR-US: Umbraco
CVE-2015-8812 [Flaw in CXGB3 driver]
RESERVED
- - linux <unfixed>
+ - linux 4.4.2-1
- linux-2.6 <removed>
NOTE: http://www.openwall.com/lists/oss-security/2016/02/11/1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1303532
@@ -5681,7 +5681,7 @@
NOT-FOR-US: Oracle Sun Solaris
CVE-2016-0617 [hugetlbfs: fix bugs in hugetlb_vmtruncate_list()]
RESERVED
- - linux <unfixed>
+ - linux 4.4.2-1
[jessie] - linux <not-affected> (Vulnerable code introduced later)
[wheezy] - linux <not-affected> (Vulnerable code introduced later)
- linux-2.6 <not-affected> (Vulnerable code introduced later)
More information about the Secure-testing-commits
mailing list