[Secure-testing-commits] r40450 - data/CVE

security tracker role sectracker at moszumanska.debian.org
Fri Mar 18 09:10:24 UTC 2016


Author: sectracker
Date: 2016-03-18 09:10:24 +0000 (Fri, 18 Mar 2016)
New Revision: 40450

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-18 06:01:50 UTC (rev 40449)
+++ data/CVE/list	2016-03-18 09:10:24 UTC (rev 40450)
@@ -2110,6 +2110,8 @@
 CVE-2016-2551
 	RESERVED
 CVE-2016-3191 [workspace overflow for (*ACCEPT) with deeply nested parentheses -- ZDI-CAN-3542]
+	RESERVED
+	{DLA-441-1}
 	- pcre3 2:8.38-2 (bug #815921)
 	[jessie] - pcre3 <no-dsa> (Minor issue)
 	[wheezy] - pcre3 <no-dsa> (Minor issue)
@@ -3135,10 +3137,12 @@
 CVE-2016-2272
 	RESERVED
 CVE-2016-2271 (VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-170.html
 CVE-2016-2270 (Xen 4.6.x and earlier allows local guest administrators to cause a ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-154.html
@@ -5503,10 +5507,12 @@
 	NOTE: https://bugs.launchpad.net/ecryptfs/+bug/1530566
 	NOTE: https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870
 CVE-2016-1571 (The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-168.html
 CVE-2016-1570 (The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-167.html
@@ -8496,6 +8502,7 @@
 	NOT-FOR-US: F1BookView
 CVE-2015-8555 [information leak in legacy x86 FPU/XMM initialization]
 	RESERVED
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-165.html
@@ -8543,7 +8550,7 @@
 	NOTE: https://git.kernel.org/linus/408fb0e5aa7fda0059db282ff58c3b2a4278baa0
 CVE-2015-8550 [paravirtualized drivers incautious about shared memory contents]
 	RESERVED
-	{DSA-3471-1 DSA-3434-1}
+	{DSA-3519-1 DSA-3471-1 DSA-3434-1}
 	[experimental] - linux 4.4~rc6-1~exp1
 	- linux 4.3.3-3
 	- linux-2.6 <removed>
@@ -10747,15 +10754,18 @@
 CVE-2015-8342
 	REJECTED
 CVE-2015-8341 (The libxl toolstack library in Xen 4.1.x through 4.6.x does not ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[wheezy] - xen <no-dsa> (Minor issue, xl not used in wheezy)
 	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-160.html
 CVE-2015-8340 (The memory_exchange function in common/memory.c in Xen 3.2.x through ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-159.html
 CVE-2015-8339 (The memory_exchange function in common/memory.c in Xen 3.2.x through ...)
+	{DSA-3519-1}
 	- xen <unfixed>
 	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-159.html




More information about the Secure-testing-commits mailing list