Author: carnil Date: 2016-06-04 07:56:45 +0000 (Sat, 04 Jun 2016) New Revision: 42303
Modified: data/CVE/list Log: Update CVE-2015-8899/dnsmasq Modified: data/CVE/list =================================================================== --- data/CVE/list 2016-06-04 07:44:17 UTC (rev 42302) +++ data/CVE/list 2016-06-04 07:56:45 UTC (rev 42303) @@ -423,8 +423,11 @@ RESERVED CVE-2015-8899 [denial of service - dnsmasq crashes querying any CNAME that points to localhost.localdomain] - dnsmasq 2.76-1 + [jessie] - dnsmasq <not-affected> (Vulnerable code introduced later) + [wheezy] - dnsmasq <not-affected> (Vulnerable code introduced later) NOTE: http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010479.html - NOTE: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=41a8d9e99be9f2cc8b02051dd322cb45e0faac87 + NOTE: Fixed by: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=41a8d9e99be9f2cc8b02051dd322cb45e0faac87 (v2.76rc1) + NOTE: Introduced by: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=cbc652423403e3cef00e00240f6beef713142246 (v2.73rc1) NOTE: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1581181 CVE-2015-8898 [Prevent null pointer access in magick/constitute.c] RESERVED _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits