Author: anarcat
Date: 2016-09-06 15:28:09 +0000 (Tue, 06 Sep 2016)
New Revision: 44370
Modified:
data/CVE/list
Log:
Summary: will not fix charybdis in wheezy, upgrade already
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-09-06 13:50:50 UTC (rev 44369)
+++ data/CVE/list 2016-09-06 15:28:09 UTC (rev 44370)
@@ -22,6 +22,7 @@
NOTE: unrealircd reportedly vulnerable, and ircd-seven reportedly not
vulnerable
CVE-2016-7143 [certificate fingerprint spoofing through crafted SASL messages]
- charybdis 3.5.3-1 (bug #836714)
+ [wheezy] - charybdis <no-dsa> (unsupported)
NOTE: charybdis patch:
https://github.com/charybdis-ircd/charybdis/commit/818a3fda944b26d4814132cee14cfda4ea4aa824
NOTE: http://www.openwall.com/lists/oss-security/2016/09/04/3
CVE-2016-7142 [certificate fingerprint spoofing through crafted SASL messages]
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
