[Secure-testing-commits] r49931 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Mar 22 15:43:03 UTC 2017


Author: carnil
Date: 2017-03-22 15:43:03 +0000 (Wed, 22 Mar 2017)
New Revision: 49931

Modified:
   data/CVE/list
Log:
Correct status for CVE-2017-5970/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-22 13:45:12 UTC (rev 49930)
+++ data/CVE/list	2017-03-22 15:43:03 UTC (rev 49931)
@@ -3188,9 +3188,8 @@
 CVE-2017-5970 (The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the ...)
 	{DSA-3791-1}
 	- linux 4.9.10-1
-	[wheezy] - linux <not-affected> (Vulnerable code introduced later)
 	NOTE: Fixed by: https://github.com/torvalds/linux/commit/34b2cef20f19c87999fff3da4071e66937db9644 (v4.10-rc8)
-	NOTE: Introduced by: https://github.com/torvalds/linux/commit/d826eb14ecef3574b6b3be55e5f4329f4a76fbf3 (v3.3-rc1)
+	NOTE: Introduced by: https://github.com/torvalds/linux/commit/f84af32cbca70a3c6d30463dc08c7984af11c277 (v2.6.35-rc1)
 CVE-2017-5969 [null pointer dereference when parsing a xml file using recover mode]
 	RESERVED
 	- libxml2 <unfixed> (bug #855001)




More information about the Secure-testing-commits mailing list