Author: carnil
Date: 2016-01-15 21:03:36 +0000 (Fri, 15 Jan 2016)
New Revision: 38955
Modified:
data/CVE/list
Log:
Update information for CVE-2016-1907/openssh
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-01-15 18:56:58 UTC (rev 38954)
+++ data/CVE/list 2016-01-15 21:03:36 UTC (rev 38955)
@@ -398,8 +398,11 @@
TODO: check
CVE-2016-1907 [Fix an out of-bound read access in the packet handling code]
- openssh 1:7.1p2-1
+ [jessie] - openssh <not-affected> (Vulnerable code not present;
Introduced in OpenSSH 6.8)
+ [wheezy] - openssh <not-affected> (Vulnerable code not present;
Introduced in OpenSSH 6.8)
[squeeze] - openssh <not-affected> (Issue introduced in OpenSSH 6.8)
- NOTE:
https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0
+ NOTE: Fixed by:
https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0
+ NOTE: Introduced by:
https://anongit.mindrot.org/openssh.git/commit/packet.c?id=091c302829210c41e7f57c3f094c7b9c054306f0
(V_6_8_P1)
CVE-2016-1898
RESERVED
- ffmpeg <unfixed>
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
