[kernel-sec-discuss] r4885 - active

[Ben Hutchings]

Author: benh
Date: 2017-01-26 21:30:07 +0000 (Thu, 26 Jan 2017)
New Revision: 4885

Modified:
   active/CVE-2016-8405
   active/CVE-2017-5576
   active/CVE-2017-5577
Log:
Mark issues pending for sid

Modified: active/CVE-2016-8405
===================================================================
--- active/CVE-2016-8405	2017-01-26 21:29:53 UTC (rev 4884)
+++ active/CVE-2016-8405	2017-01-26 21:30:07 UTC (rev 4885)
@@ -3,8 +3,8 @@
 Notes:
 Bugs:
 upstream: pending [2dc705a9930b4806250fbf5a76e55266e59389f2]
-3.16-upstream-stable:
-3.2-upstream-stable:
-sid:
-3.16-jessie-security:
-3.2-wheezy-security:
+3.16-upstream-stable: needed
+3.2-upstream-stable: needed
+sid: pending (4.9.6-1) [bugfix/all/fbdev-color-map-coying-bounds-checking.patch]
+3.16-jessie-security: pending
+3.2-wheezy-security: pending

Modified: active/CVE-2017-5576
===================================================================
--- active/CVE-2017-5576	2017-01-26 21:29:53 UTC (rev 4884)
+++ active/CVE-2017-5576	2017-01-26 21:30:07 UTC (rev 4885)
@@ -6,6 +6,6 @@
 upstream: needed
 3.16-upstream-stable: N/A "Introduced in 4.5-rc1 with d5b1a78a772f1e31a94f8babfa964152ec5e9aa5"
 3.2-upstream-stable: N/A "Introduced in 4.5-rc1 with d5b1a78a772f1e31a94f8babfa964152ec5e9aa5"
-sid: needed
+sid: pending (4.9.6-1) [bugfix/arm/drm-vc4-fix-an-integer-overflow-in-temporary-allocation-layout.patch]
 3.16-jessie-security: N/A "Vulnerable code not present"
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2017-5577
===================================================================
--- active/CVE-2017-5577	2017-01-26 21:29:53 UTC (rev 4884)
+++ active/CVE-2017-5577	2017-01-26 21:30:07 UTC (rev 4885)
@@ -6,6 +6,6 @@
 upstream: needed
 3.16-upstream-stable: N/A "Introduced in 4.5-rc1 with d5b1a78a772f1e31a94f8babfa964152ec5e9aa5"
 3.2-upstream-stable: N/A "Introduced in 4.5-rc1 with d5b1a78a772f1e31a94f8babfa964152ec5e9aa5"
-sid: needed
+sid: pending (4.9.6-1) [bugfix/arm/drm/vc4-return-einval-on-the-overflow-checks-failing.patch]
 3.16-jessie-security: N/A "Vulnerable code not present"
 3.2-wheezy-security: N/A "Vulnerable code not present"