[kernel-sec-discuss] r5723 - active

[Ben Hutchings]

Author: benh
Date: 2017-11-16 18:16:58 +0000 (Thu, 16 Nov 2017)
New Revision: 5723

Modified:
   active/CVE-2017-16536
   active/CVE-2017-16537
   active/CVE-2017-16646
   active/CVE-2017-16647
   active/CVE-2017-16649
   active/CVE-2017-16650
Log:
Mark issues pending in sid

Modified: active/CVE-2017-16536
===================================================================
--- active/CVE-2017-16536	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16536	2017-11-16 18:16:58 UTC (rev 5723)
@@ -9,7 +9,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/media-cx231xx-cards-fix-null-deref-on-missing-associ.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: needed

Modified: active/CVE-2017-16537
===================================================================
--- active/CVE-2017-16537	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16537	2017-11-16 18:16:58 UTC (rev 5723)
@@ -9,7 +9,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/media-imon-fix-null-ptr-deref-in-imon_probe.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: needed

Modified: active/CVE-2017-16646
===================================================================
--- active/CVE-2017-16646	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16646	2017-11-16 18:16:58 UTC (rev 5723)
@@ -9,7 +9,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: N/A "Vulnerable code not present"
 3.2-upstream-stable: N/A "Vulnerable code not present"
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/media-dib0700-fix-invalid-dvb_detach-argument.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: N/A "Vulnerable code not present"
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2017-16647
===================================================================
--- active/CVE-2017-16647	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16647	2017-11-16 18:16:58 UTC (rev 5723)
@@ -8,7 +8,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: N/A "Vulnerable code not present"
 3.2-upstream-stable: N/A "Vulnerable code not present"
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/net-usb-asix-fill-null-ptr-deref-in-asix_suspend.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: N/A "Vulnerable code not present"
 3.2-wheezy-security: N/A "Vulnerable code not present"

Modified: active/CVE-2017-16649
===================================================================
--- active/CVE-2017-16649	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16649	2017-11-16 18:16:58 UTC (rev 5723)
@@ -9,7 +9,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/net-cdc_ether-fix-divide-by-0-on-bad-descriptors.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: needed

Modified: active/CVE-2017-16650
===================================================================
--- active/CVE-2017-16650	2017-11-16 18:01:10 UTC (rev 5722)
+++ active/CVE-2017-16650	2017-11-16 18:16:58 UTC (rev 5723)
@@ -9,7 +9,7 @@
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: N/A "Vulnerable code not present"
-sid: needed
+sid: pending (4.13.13-1) [bugfix/all/net-qmi_wwan-fix-divide-by-0-on-bad-descriptors.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: N/A "Vulnerable code not present"