[kernel-sec-discuss] r4516 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-07-04 09:42:37 +0000 (Mon, 04 Jul 2016)
New Revision: 4516

Modified:
   active/CVE-2014-9904
   active/CVE-2016-5728
   active/CVE-2016-5828
   active/CVE-2016-5829
   active/CVE-2016-6130
Log:
3.16.7-ckt25-2+deb8u3 is released

Modified: active/CVE-2014-9904
===================================================================
--- active/CVE-2014-9904	2016-07-04 06:07:54 UTC (rev 4515)
+++ active/CVE-2014-9904	2016-07-04 09:42:37 UTC (rev 4516)
@@ -6,5 +6,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Introduced with b35cc8225845112a616e3a2266d2fde5ab13d3ab in 3.7-rc1"
 sid: released (4.0.2-1)
-3.16-jessie-security: pending (3.16.7-ckt25-2+deb8u3) [bugfix/all/alsa-compress-fix-an-integer-overflow-check.patch]
+3.16-jessie-security: released (3.16.7-ckt25-2+deb8u3) [bugfix/all/alsa-compress-fix-an-integer-overflow-check.patch]
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2016-5728
===================================================================
--- active/CVE-2016-5728	2016-07-04 06:07:54 UTC (rev 4515)
+++ active/CVE-2016-5728	2016-07-04 09:42:37 UTC (rev 4516)
@@ -20,5 +20,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Vulnerable code introduced in 3.13-rc1 with f69bcbf3b4c4b333dcd7a48eaf868bf0c88edab5"
 sid: released (4.6.1-1) [2a9369456a384d84c521c8ebb48d247e8738f84f]
-3.16-jessie-security: pending (3.16.7-ckt25-2+deb8u3) [bugfix/x86/misc-mic-fix-for-double-fetch-security-bug-in-vop-dr.patch]
+3.16-jessie-security: released (3.16.7-ckt25-2+deb8u3) [bugfix/x86/misc-mic-fix-for-double-fetch-security-bug-in-vop-dr.patch]
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2016-5828
===================================================================
--- active/CVE-2016-5828	2016-07-04 06:07:54 UTC (rev 4515)
+++ active/CVE-2016-5828	2016-07-04 09:42:37 UTC (rev 4516)
@@ -8,5 +8,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Introduced in 3.10-rc1 with bc2a9408fa65195288b41751016c36fd00a75a85"
 sid: pending (4.6.3-1) [bugfix/powerpc/powerpc-tm-always-reclaim-in-start_thread-for-exec-c.patch]
-3.16-jessie-security: pending (3.16.7-ckt25-2+deb8u3) [bugfix/powerpc/powerpc-tm-always-reclaim-in-start_thread-for-exec-c.patch]
+3.16-jessie-security: released (3.16.7-ckt25-2+deb8u3) [bugfix/powerpc/powerpc-tm-always-reclaim-in-start_thread-for-exec-c.patch]
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2016-5829
===================================================================
--- active/CVE-2016-5829	2016-07-04 06:07:54 UTC (rev 4515)
+++ active/CVE-2016-5829	2016-07-04 09:42:37 UTC (rev 4516)
@@ -6,5 +6,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
 sid: pending (4.6.3-1) [bugfix/all/HID-hiddev-validate-num_values-for-HIDIOCGUSAGES-HID.patch]
-3.16-jessie-security: pending (3.16.7-ckt25-2+deb8u3) [bugfix/all/hid-hiddev-validate-num_values-for-hidiocgusages-hid.patch]
+3.16-jessie-security: released (3.16.7-ckt25-2+deb8u3) [bugfix/all/hid-hiddev-validate-num_values-for-hidiocgusages-hid.patch]
 3.2-wheezy-security: pending (3.2.81-2) [bugfix/all/hid-hiddev-validate-num_values-for-hidiocgusages-hid.patch]

Modified: active/CVE-2016-6130
===================================================================
--- active/CVE-2016-6130	2016-07-04 06:07:54 UTC (rev 4515)
+++ active/CVE-2016-6130	2016-07-04 09:42:37 UTC (rev 4516)
@@ -7,5 +7,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Vulnerable code introduced in 3.11 with d475f942b1dd6a897dac3ad4ed98d6994b275378"
 sid: released (4.6.1-1)
-3.16-jessie-security: pending (3.16.7-ckt25-2+deb8u3) [bugfix/s390/s390-sclp_ctl-fix-potential-information-leak-with-de.patch]
+3.16-jessie-security: released (3.16.7-ckt25-2+deb8u3) [bugfix/s390/s390-sclp_ctl-fix-potential-information-leak-with-de.patch]
 3.2-wheezy-security: N/A "Vulnerable code not present"