[kernel-sec-discuss] r5794 - active

Ben Hutchings benh at moszumanska.debian.org
Tue Dec 19 22:42:16 UTC 2017


Author: benh
Date: 2017-12-19 22:42:16 +0000 (Tue, 19 Dec 2017)
New Revision: 5794

Modified:
   active/CVE-2017-16538
   active/CVE-2017-16644
   active/CVE-2017-17449
Log:
Mark some issues pending/releaased upstream

Modified: active/CVE-2017-16538
===================================================================
--- active/CVE-2017-16538	2017-12-19 22:33:33 UTC (rev 5793)
+++ active/CVE-2017-16538	2017-12-19 22:42:16 UTC (rev 5794)
@@ -6,7 +6,7 @@
  bwh> Probably introduced in 3.9 by commit b858c331cdf4 "[media] m88rs2000:
  bwh> make use ts2020"
 Bugs:
-upstream: needed
+upstream: pending [3d932ee27e852e4904647f15b64dedca51187ad7, 7bf7a7116ed313c601307f7e585419369926ab05]
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Vulnerable code not present"

Modified: active/CVE-2017-16644
===================================================================
--- active/CVE-2017-16644	2017-12-19 22:33:33 UTC (rev 5793)
+++ active/CVE-2017-16644	2017-12-19 22:42:16 UTC (rev 5794)
@@ -9,7 +9,7 @@
  bwh> fixing this also fixes memory leaks on the failure path which
  bwh> have been present for much longer.
 Bugs:
-upstream: needed
+upstream: pending [c0f71bbb810237a38734607ca4599632f7f5d47f]
 4.9-upstream-stable: needed
 3.16-upstream-stable: N/A "Vulnerable code not present"
 3.2-upstream-stable: N/A "Vulnerable code not present"

Modified: active/CVE-2017-17449
===================================================================
--- active/CVE-2017-17449	2017-12-19 22:33:33 UTC (rev 5793)
+++ active/CVE-2017-17449	2017-12-19 22:42:16 UTC (rev 5794)
@@ -6,7 +6,7 @@
  bwh> The fix accepted upstream is the second version, which doesn't treat the
  bwh> init namespace as special.
 Bugs:
-upstream: needed
+upstream: released (4.15-rc4) [93c647643b48f0131f02e45da3bd367d80443291]
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: ignored "Minor issue as user namespaces not supported"




More information about the kernel-sec-discuss mailing list