Author: benh
Date: 2015-03-10 21:53:49 +0000 (Tue, 10 Mar 2015)
New Revision: 32764
Modified:
data/CVE/list
Log:
Mark the linux-2.6 issues not planned to be fixed in squeeze-lts as <no-dsa>
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-03-10 21:10:14 UTC (rev 32763)
+++ data/CVE/list 2015-03-10 21:53:49 UTC (rev 32764)
@@ -6052,9 +6052,8 @@
{DSA-3128-1}
- linux 3.16.7-ckt4-1
- linux-2.6 <removed>
- [squeeze] - linux-2.6 <unfixed>
+ [squeeze] - linux-2.6 <no-dsa> (Too risky to backport)
NOTE:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/arch/x86?id=f647d7c155f069c1a068030255c300663516420e
(v3.19-rc1)
- NOTE: No plan to fix in squeeze as it is too risky to backport
CVE-2014-9420 (The rock_continue function in fs/isofs/rock.c in the Linux
kernel ...)
{DLA-155-1}
- linux 3.16.7-ckt4-1
@@ -7054,9 +7053,8 @@
CVE-2010-5313 (Race condition in arch/x86/kvm/x86.c in the Linux kernel before
2.6.38 ...)
- linux 2.6.38-1
- linux-2.6 2.6.38-1
- [squeeze] - linux-2.6 <unfixed>
+ [squeeze] - linux-2.6 <no-dsa> (KVM not supported in Squeeze LTS)
NOTE:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fc3a9157d314
(v2.6.38-rc1)
- NOTE: KVM not supported in Squeeze LTS
CVE-2014-9156 (The FileField module 6.x-3.x before 6.x-3.13 for Drupal does
not ...)
NOT-FOR-US: Drupal module FileField
CVE-2014-9129 (Cross-site request forgery (CSRF) vulnerability in the
CreativeMinds ...)
@@ -7527,11 +7525,10 @@
{DSA-3170-1}
- linux 3.16.7-ckt4-2
- linux-2.6 <removed>
- [squeeze] - linux-2.6 <unfixed>
+ [squeeze] - linux-2.6 <no-dsa> (KVM not supported in Squeeze LTS)
NOTE: Introduced by:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c60435261deaefeb53ce3222d04d7d5bea81296
NOTE: Fixed by:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3747379accba8e95d70cec0eae0582c8c182050
NOTE: http://permalink.gmane.org/gmane.linux.kernel.commits.head/502245
- NOTE: KVM not supported in Squeeze LTS
CVE-2015-0238
RESERVED
NOT-FOR-US: selinux-policy as shipped with Red Hat OpenShift 2
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
