[kernel-sec-discuss] r3754 - active

Ben Hutchings benh at moszumanska.debian.org
Fri Apr 24 14:41:52 UTC 2015


Author: benh
Date: 2015-04-24 14:41:52 +0000 (Fri, 24 Apr 2015)
New Revision: 3754

Modified:
   active/CVE-2015-3331
   active/CVE-2015-3332
   active/CVE-2015-3339
Log:
Add patch names for CVE-2015-333{1,2,9}

Modified: active/CVE-2015-3331
===================================================================
--- active/CVE-2015-3331	2015-04-23 19:19:56 UTC (rev 3753)
+++ active/CVE-2015-3331	2015-04-24 14:41:52 UTC (rev 3754)
@@ -5,8 +5,8 @@
  - https://bugs.debian.org/782561
 upstream: released (v4.0-rc5) [ccfe8c3f7e52ae83155cb038753f4c75b774ca8a]
 2.6.32-upstream-stable: N/A "Introduced in v2.6.38-rc1 with 0bd82f5f6355775fbaf7d3c664432ce1b862be1e"
-sid: released (3.16.7-ckt9-3)
-3.16-jessie-security: pending (3.16.7-ckt9-3~deb8u1)
+sid: released (3.16.7-ckt9-3) [bugfix/x86/crypto-aesni-fix-memory-usage-in-GCM-decryption.patch]
+3.16-jessie-security: pending (3.16.7-ckt9-3~deb8u1) [bugfix/x86/crypto-aesni-fix-memory-usage-in-GCM-decryption.patch]
 3.2-wheezy-security: needed
 2.6.32-squeeze-security: N/A "Introduced in v2.6.38-rc1 with 0bd82f5f6355775fbaf7d3c664432ce1b862be1e"
 3.16-upstream-stable: pending (3.16.7-ckt10)

Modified: active/CVE-2015-3332
===================================================================
--- active/CVE-2015-3332	2015-04-23 19:19:56 UTC (rev 3753)
+++ active/CVE-2015-3332	2015-04-24 14:41:52 UTC (rev 3754)
@@ -5,8 +5,8 @@
  - http://bugs.debian.org/782515
 upstream: N/A "Only affects < 3.18 kernels with 355a901e6cf1b2b763ec85caa2a9f04fbcc4ab4a backported"
 2.6.32-upstream-stable: N/A "355a901e6cf1b2b763ec85caa2a9f04fbcc4ab4a not backported"
-sid: released (3.16.7-ckt9-3)
-3.16-jessie-security: pending (3.16.7-ckt9-3~deb8u1)
+sid: released (3.16.7-ckt9-3) [bugfix/all/tcp-fix-crash-in-tcp-fast-open.patch]
+3.16-jessie-security: pending (3.16.7-ckt9-3~deb8u1) [bugfix/all/tcp-fix-crash-in-tcp-fast-open.patch]
 3.2-wheezy-security: N/A "355a901e6cf1b2b763ec85caa2a9f04fbcc4ab4a not backported"
 2.6.32-squeeze-security: N/A "355a901e6cf1b2b763ec85caa2a9f04fbcc4ab4a not backported"
 3.16-upstream-stable: pending (3.16.7-ckt10)

Modified: active/CVE-2015-3339
===================================================================
--- active/CVE-2015-3339	2015-04-23 19:19:56 UTC (rev 3753)
+++ active/CVE-2015-3339	2015-04-24 14:41:52 UTC (rev 3754)
@@ -4,8 +4,8 @@
 Bugs:
 upstream: pending [8b01fc86b9f425899f8a3a8fc1c47d73c2c20543]
 2.6.32-upstream-stable: needed
-sid: released (3.16.7-ckt9-3)
-3.16-jessie-security: needed
+sid: released (3.16.7-ckt9-3) [bugfix/all/fs-take-i_mutex-during-prepare_binprm-for-set-ug-id-.patch]
+3.16-jessie-security: pending (3.16.7-ckt9-3~deb8u1) [bugfix/all/fs-take-i_mutex-during-prepare_binprm-for-set-ug-id-.patch]
 3.2-wheezy-security: needed
 2.6.32-squeeze-security: needed
 3.16-upstream-stable: needed




More information about the kernel-sec-discuss mailing list