PDA

View Full Version : SLES 11 SP3 Where can we see the release versions for fixed CVEs



ragmayur
17-May-2016, 07:38
Is there any place where we can see what all releases, a particular CVE fix has been checked into?
For example, I tried to find out what has SUSE done with respect to the CVE-2015-8746 and ended up landing at https://www.suse.com/security/cve/CVE-2015-8746.html
This page doesn't have any information about whether the CVE has been addressed and if so in what all versions has the fix gone into?

thsundel
17-May-2016, 08:17
Is there any place where we can see what all releases, a particular CVE fix has been checked into?
For example, I tried to find out what has SUSE done with respect to the CVE-2015-8746 and ended up landing at https://www.suse.com/security/cve/CVE-2015-8746.html
This page doesn't have any information about whether the CVE has been addressed and if so in what all versions has the fix gone into?

On that page you see a reference to a bug number, clicking it you will see:


none of the older branch contains the backport so none of the SLE branches is affected AFAIU.

So this bug was only affecting openSUSE 13.1/2.

Thomas