Author: carnil Date: 2016-09-18 17:17:42 +0000 (Sun, 18 Sep 2016) New Revision: 44719
Modified: data/CVE/list Log: CVE-2016-7444/gnutls assigned Modified: data/CVE/list =================================================================== --- data/CVE/list 2016-09-18 17:16:27 UTC (rev 44718) +++ data/CVE/list 2016-09-18 17:17:42 UTC (rev 44719) @@ -69,13 +69,13 @@ RESERVED CVE-2016-8201 RESERVED -CVE-2016-XXXX [GNUTLS-SA-2016-3: missing OCSP response serial length check] +CVE-2016-7444 [GNUTLS-SA-2016-3: missing OCSP response serial length check] - gnutls28 3.5.3-4 NOTE: https://gnutls.org/security.html#GNUTLS-SA-2016-3 NOTE: http://lists.gnutls.org/pipermail/gnutls-devel/2016-September/008146.html NOTE: Upstream fix: https://gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1374266 - NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/09/18/3 + NOTE: http://www.openwall.com/lists/oss-security/2016/09/18/3 CVE-2017-0300 RESERVED CVE-2017-0299 @@ -2186,8 +2186,6 @@ NOTE: https://github.com/uclouvain/openjpeg/issues/843 NOTE: PoC: https://github.com/STARLABSEC/pocs/raw/master/openjpeg-nullptr-github-issue-842.ppm TODO: check possibly openjpeg -CVE-2016-7444 - RESERVED CVE-2016-7443 RESERVED CVE-2016-7442 _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits