[Secure-testing-commits] r40136 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-03 05:51:27 +0000 (Thu, 03 Mar 2016)
New Revision: 40136

Modified:
   data/CVE/list
Log:
Add CVE-2015-1339/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-03 05:46:11 UTC (rev 40135)
+++ data/CVE/list	2016-03-03 05:51:27 UTC (rev 40136)
@@ -29658,8 +29658,13 @@
 	RESERVED
 CVE-2015-1340
 	RESERVED
-CVE-2015-1339
+CVE-2015-1339 [memory exhaustion via CUSE driver]
 	RESERVED
+	- linux 4.4.2-1
+	[jessie] - linux <not-affected> (Vulnerable code introduced in v4.2-rc1)
+	[wheezy] - linux <not-affected> (Vulnerable code introduced in v4.2-rc1)
+	NOTE: Introduced in: https://git.kernel.org/linus/cc080e9e9be16ccf26135d366d7d2b65209f1d56 (v4.2-rc1)
+	NOTE: Fixed in: https://git.kernel.org/linus/2c5816b4beccc8ba709144539f6fdd764f8fa49c (v4.4-rc5)
 CVE-2015-1338 (kernel_crashdump in Apport before 2.19 allows local users to cause a ...)
 	[experimental] - apport <unfixed>
 	NOTE: apport only in experimental, so we cannot track this in security-tracker