[Secure-testing-commits] r46662 - data/CVE

Wed Nov 30 17:14:48 UTC 2016

Author: carnil
Date: 2016-11-30 17:14:48 +0000 (Wed, 30 Nov 2016)
New Revision: 46662

Modified:
   data/CVE/list
Log:
Update status for CVE-2016-8645/linux

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-11-30 16:42:22 UTC (rev 46661)
+++ data/CVE/list	2016-11-30 17:14:48 UTC (rev 46662)
@@ -3330,7 +3330,9 @@
 	NOTE: Fixed by: https://git.kernel.org/linus/4afa5f9617927453ac04b24b584f6c718dfb4f45 (v4.4-rc2)
 CVE-2016-8645 (The TCP stack in the Linux kernel before 4.8.10 mishandles skb ...)
 	- linux <unfixed>
-	NOTE: Fixed by: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac6e780070e30e4c35bd395acfe9191e6268bdd3
+	[wheezy] - linux <not-affected> (Vulnerable code introduced later)
+	NOTE: Fixed by: https://git.kernel.org/linus/ac6e780070e30e4c35bd395acfe9191e6268bdd3 (v4.9-rc6)
+	NOTE: Introduced in: https://git.kernel.org/linus/cf60af03ca4e71134206809ea892e49b92a88896 (v3.6-rc1)
 CVE-2016-8644
 	RESERVED
 	- moodle 2.7.17+dfsg-1


