[Secure-testing-commits] r49541 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Mar 10 03:58:16 UTC 2017


Author: carnil
Date: 2017-03-10 03:58:16 +0000 (Fri, 10 Mar 2017)
New Revision: 49541

Modified:
   data/CVE/list
Log:
Add CVE-2017-5985/lxc

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-10 03:58:05 UTC (rev 49540)
+++ data/CVE/list	2017-03-10 03:58:16 UTC (rev 49541)
@@ -1625,8 +1625,13 @@
 	{DSA-3804-1 DLA-849-1}
 	- linux 4.9.10-1
 	NOTE: Fixed by: https://git.kernel.org/linus/2dcab598484185dea7ec22219c76dcdd59e3cb90
-CVE-2017-5985
+CVE-2017-5985 [lxc-user-nic didn't verify network namespace ownership]
 	RESERVED
+	- lxc <unfixed>
+	[jessie] - lxc <no-dsa> (Minor issue, can be fixed via point release)
+	NOTE: https://lists.linuxcontainers.org/pipermail/lxc-users/2017-March/012925.html
+	NOTE: https://launchpad.net/bugs/1654676
+	NOTE: https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9
 CVE-2017-5984
 	RESERVED
 CVE-2017-5983




More information about the Secure-testing-commits mailing list