Note CVEs fixed upstream

2018-01-15 04:43:12 +00:00 · 2018-01-15 04:43:12 +00:00 · 9d3430166e
parent 6e7610453d
commit 9d3430166e
1 changed files with 3 additions and 0 deletions
--- a/debian/changelog
+++ b/debian/changelog
@ -1,6 +1,9 @@
 linux (4.15~rc8-1~exp1) UNRELEASED; urgency=medium

  * New upstream release candidate
+    - RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332)
+    - RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333)
+    - loop: fix concurrent lo_open/lo_release (CVE-2018-5344)

  [ Ben Hutchings ]
  * [arm64] Update "add kernel config option to lock down when in Secure Boot