[kernel-sec-discuss] r4735 - retired

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Nov 28 09:22:26 UTC 2016


Author: carnil
Date: 2016-11-28 09:22:25 +0000 (Mon, 28 Nov 2016)
New Revision: 4735

Added:
   retired/CVE-2016-9644
Removed:
   retired/CVE-2016-9178
Log:
Rename retired file, CVE-2016-9644 is for the privilege escalation

Deleted: retired/CVE-2016-9178
===================================================================
--- retired/CVE-2016-9178	2016-11-28 05:35:45 UTC (rev 4734)
+++ retired/CVE-2016-9178	2016-11-28 09:22:25 UTC (rev 4735)
@@ -1,17 +0,0 @@
-Description:
-References:
- http://www.openwall.com/lists/oss-security/2016/11/03/2
- https://lwn.net/Articles/705264/
-Notes:
- jmm> This is only an issue if 1c109fabbd51863475cd12ac206bdd249aee35af
- jmm> (added in 4.8) is backported without also backporting
- jmm> 548acf19234dbda5a52d5a8e7e205af46e9da840 (added in 4.6), as such
- jmm> the stock upstream kernel, unstable, 3.16.x and 3.2.x were never
- jmm> affected
-Bugs:
-upstream: n/a "Vulnerable combination of patches not present"
-3.16-upstream-stable: n/a "Vulnerable combination of patches not present"
-3.2-upstream-stable: n/a "Vulnerable combination of patches not present"
-sid: n/a "Vulnerable combination of patches not present"
-3.16-jessie-security: n/a "Vulnerable combination of patches not present"
-3.2-wheezy-security: n/a "Vulnerable combination of patches not present"

Copied: retired/CVE-2016-9644 (from rev 4734, retired/CVE-2016-9178)
===================================================================
--- retired/CVE-2016-9644	                        (rev 0)
+++ retired/CVE-2016-9644	2016-11-28 09:22:25 UTC (rev 4735)
@@ -0,0 +1,17 @@
+Description:
+References:
+ http://www.openwall.com/lists/oss-security/2016/11/03/2
+ https://lwn.net/Articles/705264/
+Notes:
+ jmm> This is only an issue if 1c109fabbd51863475cd12ac206bdd249aee35af
+ jmm> (added in 4.8) is backported without also backporting
+ jmm> 548acf19234dbda5a52d5a8e7e205af46e9da840 (added in 4.6), as such
+ jmm> the stock upstream kernel, unstable, 3.16.x and 3.2.x were never
+ jmm> affected
+Bugs:
+upstream: n/a "Vulnerable combination of patches not present"
+3.16-upstream-stable: n/a "Vulnerable combination of patches not present"
+3.2-upstream-stable: n/a "Vulnerable combination of patches not present"
+sid: n/a "Vulnerable combination of patches not present"
+3.16-jessie-security: n/a "Vulnerable combination of patches not present"
+3.2-wheezy-security: n/a "Vulnerable combination of patches not present"




More information about the kernel-sec-discuss mailing list