Update issue status for sid

5 files changed, 8 insertions, 5 deletions

diff --git a/active/CVE-2018-10322 b/active/CVE-2018-10322
index 783201ba..030ab3eb 100644
--- a/active/CVE-2018-10322
+++ b/active/CVE-2018-10322
@@ -9,7 +9,7 @@ upstream: needed
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: ignored "dinode verifier not implemented"
-sid: needed
+sid: pending (4.16.4-1) [bugfix/all/xfs-enhance-dinode-verifier.patch]
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: ignored "dinode verifier not implemented"
diff --git a/active/CVE-2018-10323 b/active/CVE-2018-10323
index dfffc04a..73572a55 100644
--- a/active/CVE-2018-10323
+++ b/active/CVE-2018-10323
@@ -9,7 +9,7 @@ upstream: needed
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
-sid: needed
+sid: pending (4.16.4-1) [bugfix/all/xfs-set-format-back-to-extents-if-xfs_bmap_extents_t.patch]
 4.9-stretch-security: pending (4.9.88-1) [bugfix/all/xfs-set-format-back-to-extents-if-xfs_bmap_extents_t.patch]
 3.16-jessie-security: needed
 3.2-wheezy-security: needed
diff --git a/active/CVE-2018-1093 b/active/CVE-2018-1093
index f3ad7003..6fa8acff 100644
--- a/active/CVE-2018-1093
+++ b/active/CVE-2018-1093
@@ -6,13 +6,16 @@ Notes:
  carnil> and fix needs a followup.
  carnil> Caused other regressions:
  carnil> https://marc.info/?l=linux-ext4&m=152416385122029&w=2
+ bwh> The upstream fix was applied in sid, version 4.15.17-1, but will be
+ bwh> reverted in the next upload due to the regression.  I've changed the
+ bwh> status to "needed" as we need a better fix.
 Bugs:
  https://bugzilla.kernel.org/show_bug.cgi?id=199181
 upstream: released (4.17-rc1) [7dac4a1726a9c64a517d595c40e95e2d0d135f6f]
 4.9-upstream-stable: needed
 3.16-upstream-stable: needed
 3.2-upstream-stable: needed
-sid: released (4.15.17-1) [bugfix/all/ext4-add-validity-checks-for-bitmap-block-numbers.patch]
+sid: needed
 4.9-stretch-security: needed
 3.16-jessie-security: needed
 3.2-wheezy-security: needed
diff --git a/active/CVE-2018-1095 b/active/CVE-2018-1095
index b9e8e316..fd022bcf 100644
--- a/active/CVE-2018-1095
+++ b/active/CVE-2018-1095
@@ -8,7 +8,7 @@ upstream: released (4.17-rc1) [ce3fd194fcc6fbdc00ce095a852f22df97baa401]
 4.9-upstream-stable: N/A "Vulnerable code introduced later"
 3.16-upstream-stable: N/A "Vulnerable code introduced later"
 3.2-upstream-stable: N/A "Vulnerable code introduced later"
-sid: needed
+sid: pending (4.16.4-1)
 4.9-stretch-security: N/A "Vulnerable code introduced later"
 3.16-jessie-security: N/A "Vulnerable code introduced later"
 3.2-wheezy-security: N/A "Vulnerable code introduced later"
diff --git a/active/CVE-2018-1108 b/active/CVE-2018-1108
index b79293b8..f8e1b61a 100644
--- a/active/CVE-2018-1108
+++ b/active/CVE-2018-1108
@@ -11,7 +11,7 @@ upstream: released (4.17-rc2) [43838a23a05fbd13e47d750d3dfd77001536dd33]
 4.9-upstream-stable: released (4.9.96) [4dfb3442bb7e1fb80515df4a199ca5a7a8edf900]
 3.16-upstream-stable: N/A "Vulnerable code not present"
 3.2-upstream-stable: N/A "Vulnerable code not present"
-sid: needed
+sid: pending (4.16.4-1)
 4.9-stretch-security: pending (4.9.88-1) [bugfix/all/random-fix-crng_ready-test.patch]
 3.16-jessie-security: N/A "Vulnerable code not present"
 3.2-wheezy-security: N/A "Vulnerable code not present"