[Secure-testing-commits] r46487 - data/CVE

Wed Nov 23 18:10:21 UTC 2016

Author: carnil
Date: 2016-11-23 18:10:21 +0000 (Wed, 23 Nov 2016)
New Revision: 46487

Modified:
   data/CVE/list
Log:
Add description for CVE-2016-8649, reported bug for unstable

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-11-23 17:00:39 UTC (rev 46486)
+++ data/CVE/list	2016-11-23 18:10:21 UTC (rev 46487)
@@ -2583,10 +2583,12 @@
 	RESERVED
 CVE-2016-8650
 	RESERVED
-CVE-2016-8649
+CVE-2016-8649 [lxc-attach to malicious container allows access to host]
 	RESERVED
-	- lxc <unfixed>
+	- lxc <unfixed> (bug #845465)
 	NOTE: Fixed by: https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c
+	NOTE: Details: https://launchpad.net/bugs/1639345
+	NOTE: To be complete this needs as well changes to src:linux
 CVE-2016-8648
 	RESERVED
 CVE-2016-8647 [in some circumstances the mysql_user module may fail to correctly change a password]


