[Secure-testing-commits] r42551 - data/CVE

[Petter Reinholdtsen]

Author: pere
Date: 2016-06-15 13:38:44 +0000 (Wed, 15 Jun 2016)
New Revision: 42551

Modified:
   data/CVE/list
Log:
Add zfs-linux refs for CVE-2010-0318 and CVE-2015-3400.  Not affected, as far as I can tell.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-15 13:37:35 UTC (rev 42550)
+++ data/CVE/list	2016-06-15 13:38:44 UTC (rev 42551)
@@ -31615,7 +31615,9 @@
 	RESERVED
 CVE-2015-3400
 	RESERVED
-	NOT-FOR-US: ZFS on Linux Debian packages specific as published in the archive.zfsonlinux.org repositories
+	- zfs-linux <not-affected>
+	NOTE: Issue with ZFS on Linux Debian packages specific as published in the archive.zfsonlinux.org repositories
+	NOTE: https://github.com/zfsonlinux/zfs/issues/3319
 CVE-2015-3338
 	RESERVED
 CVE-2015-3337 (Directory traversal vulnerability in Elasticsearch before 1.4.5 and ...)
@@ -131981,6 +131983,7 @@
 CVE-2010-0318 (The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, ...)
 	- kfreebsd-6 <not-affected> (vulnerable code introduced in freebsd 7)
 	- kfreebsd-7 7.2-10 (medium; bug #566684)
+	- zfs-linux <not-affected>
 	[lenny] - kfreebsd-7 <no-dsa> (kfreebsd not support in Lenny)
 	- kfreebsd-8 8.0-2 (medium)
 CVE-2010-0317 (Novell Netware 6.5 SP8 allows remote attackers to cause a denial of ...)