[kernel-sec-discuss] r3745 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-18 04:52:17 +0000 (Sat, 18 Apr 2015)
New Revision: 3745

Added:
   active/CVE-2015-3331
Log:
Add CVE-2015-3331 information

Added: active/CVE-2015-3331
===================================================================
--- active/CVE-2015-3331	                        (rev 0)
+++ active/CVE-2015-3331	2015-04-18 04:52:17 UTC (rev 3745)
@@ -0,0 +1,15 @@
+Description: Buffer overruns in Linux kernel RFC4106 implementation using AESNI
+References:
+Notes:
+ - Fixed by: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccfe8c3f7e52ae83155cb038753f4c75b774ca8a (v4.0-rc5)
+ - Introduced by: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0bd82f5f6355775fbaf7d3c664432ce1b862be1e (v2.6.38-rc1)
+Bugs:
+ - https://bugs.debian.org/782561
+upstream: released (v4.0-rc5) [ccfe8c3f7e52ae83155cb038753f4c75b774ca8a]
+2.6.32-upstream-stable: N/A "Introduced in v2.6.38-rc1 with 0bd82f5f6355775fbaf7d3c664432ce1b862be1e"
+sid: needed
+3.16-jessie-security: needed
+3.2-wheezy-security: needed
+2.6.32-squeeze-security: N/A "Introduced in v2.6.38-rc1 with 0bd82f5f6355775fbaf7d3c664432ce1b862be1e"
+3.16-upstream-stable: needed
+3.2-upstream-stable: needed