[Secure-testing-commits] r39877 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 24 05:47:38 UTC 2016


Author: carnil
Date: 2016-02-24 05:47:38 +0000 (Wed, 24 Feb 2016)
New Revision: 39877

Modified:
   data/CVE/list
Log:
Add CVE-2016-2545/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-24 05:43:44 UTC (rev 39876)
+++ data/CVE/list	2016-02-24 05:47:38 UTC (rev 39877)
@@ -5,6 +5,11 @@
 	NOTE: Introduced by: https://git.kernel.org/linus/712f4aad406bb1ed67f3f98d04c044191f0ff593 (v4.5-rc1)
 	NOTE: Technically wheezy-security and squeeze-lts are not affected by this CVE since the fix for
 	NOTE: addressing CVE-2013-4312 was not applied.
+CVE-2016-2545 [ALSA: timer: Fix double unlink of active_list]
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	NOTE: Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee8413b01045c74340aa13ad5bdf905de32be736 (v4.5-rc1)
+	TODO: check versions
 CVE-2016-2544 [ALSA: seq: Fix race at timer setup and close]
 	- linux <unfixed>
 	- linux-2.6 <removed>




More information about the Secure-testing-commits mailing list