[Secure-testing-commits] r58873 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-23 16:47:26 +0000 (Sat, 23 Dec 2017)
New Revision: 58873

Modified:
   data/CVE/list
Log:
CVE-2017-1786{2,3,4} assigned

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-23 16:35:48 UTC (rev 58872)
+++ data/CVE/list	2017-12-23 16:47:26 UTC (rev 58873)
@@ -1,3 +1,18 @@
+CVE-2017-17864 [bpf/verifier: Fix states_equal() comparison of pointer and UNKNOWN]
+	- linux <unfixed>
+	[jessie] - linux <not-affected> (Vulnerable code not present)
+	[wheezy] - linux <not-affected> (Vulnerable code not present)
+CVE-2017-17863 [bpf: reject out-of-bounds stack pointer calculation]
+	- linux <unfixed>
+	[jessie] - linux <not-affected> (Vulnerable code not present)
+	[wheezy] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://www.spinics.net/lists/stable/msg206985.html
+CVE-2017-17862 [bpf: fix branch pruning logic]
+	- linux <unfixed>
+	[jessie] - linux <not-affected> (Vulnerable code not present)
+	[wheezy] - linux <not-affected> (Vulnerable code not present)
+	NOTE: Fixed by: https://git.kernel.org/linus/c131187db2d3fa2f8bf32fdf4e9a4ef805168467
+	NOTE: https://www.spinics.net/lists/stable/msg206984.html
 CVE-2017-17861
 	RESERVED
 CVE-2017-17860