[Secure-testing-commits] r48212 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-20 05:11:57 +0000 (Fri, 20 Jan 2017)
New Revision: 48212

Modified:
   data/CVE/list
Log:
Track linux status for CVE-2016-10150

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-20 02:10:39 UTC (rev 48211)
+++ data/CVE/list	2017-01-20 05:11:57 UTC (rev 48212)
@@ -1,8 +1,9 @@
 CVE-2016-10150 [kvm: use-after-free issue while creating devices]
-	- linux <undetermined>
-	NOTE: CVE request: http://www.openwall.com/lists/oss-security/2017/01/18/10
-	NOTE: CVE assignment: http://www.openwall.com/lists/oss-security/2017/01/19/6
-	NOTE: patch: https://git.kernel.org/linus/a0f1d21c1ccb1da66629627a74059dd7f5ac9c61
+	- linux 4.8.15-1
+	[jessie] - linux <not-affected> (Vulnerable code introduced later)
+	[wheezy] - linux <not-affected> (Vulnerable code introduced later)
+	NOTE: Fixed by: https://git.kernel.org/linus/a0f1d21c1ccb1da66629627a74059dd7f5ac9c61 (v4.9-rc8)
+	NOTE: Introduced by: https://git.kernel.org/linus/a28ebea2adc4a2bef5989a5a181ec238f59fbcad (v4.8-rc2)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1414506
 CVE-2016-10148 (The wp_ajax_update_plugin function in ...)
 	- wordpress 4.6.1+dfsg-1