[Secure-testing-commits] r42841 - data/CVE

Tue Jun 28 07:13:14 UTC 2016

Author: carnil
Date: 2016-06-28 07:13:14 +0000 (Tue, 28 Jun 2016)
New Revision: 42841

Modified:
   data/CVE/list
Log:
Update information for CVE-2014-9904

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-06-28 07:04:43 UTC (rev 42840)
+++ data/CVE/list	2016-06-28 07:13:14 UTC (rev 42841)
@@ -173,7 +173,10 @@
 CVE-2015-8937
 	RESERVED
 CVE-2014-9904 (The snd_compress_check_input function in sound/core/compress_offload.c ...)
-	TODO: check
+	- linux 4.0.2-1
+	NOTE: 4.0.2-1 the first version in unstable after 3.17-rc1
+	NOTE: Fixed by: https://git.kernel.org/linus/6217e5ede23285ddfee10d2e4ba0cc2d4c046205 (3.17-rc1)
+	NOTE: Introduced by: https://git.kernel.org/linus/b35cc8225845112a616e3a2266d2fde5ab13d3ab (3.7-rc1)
 CVE-2014-9903 (The sched_read_attr function in kernel/sched/core.c in the Linux ...)
 	- linux <not-affected>
 	NOTE: vulnerable code between 3.14-rc1 and 3.14-rc4


