[kernel-sec-discuss] r5052 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-08 06:01:00 +0000 (Wed, 08 Mar 2017)
New Revision: 5052

Modified:
   active/CVE-2016-9588
   active/CVE-2017-2636
   active/CVE-2017-5669
   active/CVE-2017-5986
   active/CVE-2017-6214
   active/CVE-2017-6345
   active/CVE-2017-6346
   active/CVE-2017-6348
   active/CVE-2017-6353
Log:
Mark 3.16.39-1+deb8u2 as released since tagged in git and uploaded to security-master

Modified: active/CVE-2016-9588
===================================================================
--- active/CVE-2016-9588	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2016-9588	2017-03-08 06:01:00 UTC (rev 5052)
@@ -8,5 +8,5 @@
 3.16-upstream-stable: released (3.16.41) [kvm-nvmx-allow-l1-to-intercept-software-exceptions-bp-and-of.patch]
 3.2-upstream-stable: released (3.2.86) [kvm-nvmx-allow-l1-to-intercept-software-exceptions-bp-and-of.patch]
 sid: released (4.8.15-2) [bugfix/all/kvm-nVMX-Allow-L1-to-intercept-software-exceptions-B.patch]
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/x86/kvm-nvmx-allow-l1-to-intercept-software-exceptions-bp-and-of.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/x86/kvm-nvmx-allow-l1-to-intercept-software-exceptions-bp-and-of.patch]
 3.2-wheezy-security: pending (3.2.86-1)

Modified: active/CVE-2017-2636
===================================================================
--- active/CVE-2017-2636	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-2636	2017-03-08 06:01:00 UTC (rev 5052)
@@ -8,5 +8,5 @@
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
 sid: pending (4.9.13-1) [bugfix/all/tty-n_hdlc-get-rid-of-racy-n_hdlc.patch]
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/tty-n_hdlc-get-rid-of-racy-n_hdlc.tbuf.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/tty-n_hdlc-get-rid-of-racy-n_hdlc.tbuf.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/tty-n_hdlc-get-rid-of-racy-n_hdlc.patch]

Modified: active/CVE-2017-5669
===================================================================
--- active/CVE-2017-5669	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-5669	2017-03-08 06:01:00 UTC (rev 5052)
@@ -10,5 +10,5 @@
 3.16-upstream-stable: pending (3.16.42) [ipc-shm-fix-shmat-mmap-nil-page-protection.patch]
 3.2-upstream-stable: pending (3.2.87) [ipc-shm-fix-shmat-mmap-nil-page-protection.patch]
 sid: released (4.9.13-1) [bugfix/all/ipc-shm-fix-shmat-mmap-nil-page-protection.patch]
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/ipc-shm-Fix-shmat-mmap-nil-page-protection.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/ipc-shm-Fix-shmat-mmap-nil-page-protection.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/ipc-shm-fix-shmat-mmap-nil-page-protection.patch]

Modified: active/CVE-2017-5986
===================================================================
--- active/CVE-2017-5986	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-5986	2017-03-08 06:01:00 UTC (rev 5052)
@@ -10,6 +10,6 @@
 3.16-upstream-stable: pending (3.16.42) [sctp-avoid-bug_on-on-sctp_wait_for_sndbuf.patch]
 3.2-upstream-stable: pending (3.2.87) [sctp-avoid-bug_on-on-sctp_wait_for_sndbuf.patch]
 sid: released (4.9.10-1) [bugfix/all/sctp-avoid-BUG_ON-on-sctp_wait_for_sndbuf.patch]
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/sctp-avoid-BUG_ON-on-sctp_wait_for_sndbuf.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/sctp-avoid-BUG_ON-on-sctp_wait_for_sndbuf.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/sctp-avoid-bug_on-on-sctp_wait_for_sndbuf.patch]
 

Modified: active/CVE-2017-6214
===================================================================
--- active/CVE-2017-6214	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-6214	2017-03-08 06:01:00 UTC (rev 5052)
@@ -7,5 +7,5 @@
 3.16-upstream-stable: released (3.16.41) [tcp-avoid-infinite-loop-in-tcp_splice_read.patch]
 3.2-upstream-stable: released (3.2.86) [tcp-avoid-infinite-loop-in-tcp_splice_read.patch]
 sid: released (4.9.13-1)
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/tcp-avoid-infinite-loop-in-tcp_splice_read.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/tcp-avoid-infinite-loop-in-tcp_splice_read.patch]
 3.2-wheezy-security: pending (3.2.86-1)

Modified: active/CVE-2017-6345
===================================================================
--- active/CVE-2017-6345	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-6345	2017-03-08 06:01:00 UTC (rev 5052)
@@ -12,5 +12,5 @@
 3.16-upstream-stable: pending (3.16.42) [net-llc-avoid-bug_on-in-skb_orphan.patch]
 3.2-upstream-stable: pending (3.2.87) [net-llc-avoid-bug_on-in-skb_orphan.patch]
 sid: released (4.9.13-1)
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/net-llc-avoid-BUG_ON-in-skb_orphan.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/net-llc-avoid-BUG_ON-in-skb_orphan.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/net-llc-avoid-bug_on-in-skb_orphan.patch]

Modified: active/CVE-2017-6346
===================================================================
--- active/CVE-2017-6346	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-6346	2017-03-08 06:01:00 UTC (rev 5052)
@@ -9,5 +9,5 @@
 3.16-upstream-stable: pending (3.16.42) [packet-fix-races-in-fanout_add.patch]
 3.2-upstream-stable: pending (3.2.87) [packet-fix-races-in-fanout_add.patch]
 sid: released (4.9.13-1)
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/packet-fix-races-in-fanout_add.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/packet-fix-races-in-fanout_add.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/packet-fix-races-in-fanout_add.patch]

Modified: active/CVE-2017-6348
===================================================================
--- active/CVE-2017-6348	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-6348	2017-03-08 06:01:00 UTC (rev 5052)
@@ -9,5 +9,5 @@
 3.16-upstream-stable: pending (3.16.42) [irda-fix-lockdep-annotations-in-hashbin_delete.patch]
 3.2-upstream-stable: pending (3.2.87) [irda-fix-lockdep-annotations-in-hashbin_delete.patch]
 sid: released (4.9.13-1)
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/irda-fix-lockdep-annotations-in-hashbin_delete.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/irda-fix-lockdep-annotations-in-hashbin_delete.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/irda-fix-lockdep-annotations-in-hashbin_delete.patch]

Modified: active/CVE-2017-6353
===================================================================
--- active/CVE-2017-6353	2017-03-08 03:08:58 UTC (rev 5051)
+++ active/CVE-2017-6353	2017-03-08 06:01:00 UTC (rev 5052)
@@ -13,5 +13,5 @@
 3.16-upstream-stable: pending (3.16.42) [sctp-deny-peeloff-operation-on-asocs-with-threads-sleeping-on-it.patch]
 3.2-upstream-stable: pending (3.2.87) [sctp-deny-peeloff-operation-on-asocs-with-threads-sleeping-on-it.patch]
 sid: released (4.9.13-1) [bugfix/all/sctp-deny-peeloff-operation-on-asocs-with-threads-sl.patch]
-3.16-jessie-security: pending (3.16.39-1+deb8u2) [bugfix/all/sctp-deny-peeloff-operation-on-asocs-with-threads-sl.patch]
+3.16-jessie-security: released (3.16.39-1+deb8u2) [bugfix/all/sctp-deny-peeloff-operation-on-asocs-with-threads-sl.patch]
 3.2-wheezy-security: pending (3.2.86-1) [bugfix/all/sctp-deny-peeloff-operation-on-asocs-with-threads-sleeping-on-it.patch]