Author: carnil
Date: 2016-09-17 15:04:29 +0000 (Sat, 17 Sep 2016)
New Revision: 44685

Modified:
   data/CVE/list
Log:
Sync remaining package from point release

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2016-09-17 14:55:44 UTC (rev 44684)
+++ data/CVE/list       2016-09-17 15:04:29 UTC (rev 44685)
@@ -6523,14 +6523,14 @@
        RESERVED
        {DLA-544-1}
        - tcpreplay 3.4.4-3 (bug #829350)
-       [jessie] - tcpreplay <no-dsa> (Minor issue; will be addressed via point 
release)
+       [jessie] - tcpreplay 3.4.4-2+deb8u1
 CVE-2016-6133
        RESERVED
 CVE-2016-6153 [SQLite Tempdir Selection Vulnerability]
        RESERVED
        {DLA-543-1}
        - sqlite3 3.13.0-1
-       [jessie] - sqlite3 <no-dsa> (Minor issue, can be fixed via pu)
+       [jessie] - sqlite3 3.8.7.1-1+deb8u2
        NOTE: http://www.sqlite.org/cgi/src/info/67985761aa93fb61
        NOTE: http://www.sqlite.org/cgi/src/info/b38fe522cfc971b3
        NOTE: and possibly http://www.sqlite.org/cgi/src/info/614bb709d34e1148
@@ -8547,7 +8547,7 @@
 CVE-2016-1000108
        RESERVED
        - yaws 2.0.3-2 (bug #832433)
-       [jessie] - yaws <no-dsa> (Minor issue, can be fixed via point release)
+       [jessie] - yaws 1.98-4+deb8u1
        [wheezy] - yaws <no-dsa> (Minor issue; can be fixed along with a future 
DSA)
        NOTE: 
https://github.com/klacke/yaws/commit/9d8fb070e782c95821c90d0ca7372fc6d7316c78#diff-54053c47eb173a90c26ed19bd9d106c1
 CVE-2016-1000104
@@ -10299,7 +10299,7 @@
 CVE-2016-4971 (GNU wget before 1.18 allows remote servers to write to 
arbitrary files ...)
        {DLA-536-1}
        - wget 1.18-1 (bug #827003)
-       [jessie] - wget <no-dsa> (Minor issue)
+       [jessie] - wget 1.16-1+deb8u1
        NOTE: http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html
        NOTE: 
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1
 (v1.18)
 CVE-2016-4970 [nfinite loop vulnerability when handling renegotiation using 
SslProvider.OpenSsl]
@@ -12220,12 +12220,12 @@
 CVE-2016-4477 (wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r 
characters ...)
        {DLA-473-1}
        - wpa 2.3-2.4 (bug #823411)
-       [jessie] - wpa <no-dsa> (Minor issue; update_config=1 not default; can 
be fixed future DSA or point release)
+       [jessie] - wpa 2.3-1+deb8u4
        NOTE: http://w1.fi/security/2016-1/
 CVE-2016-4476 (hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 
do not ...)
        {DLA-473-1}
        - wpa 2.3-2.4 (bug #823411)
-       [jessie] - wpa <no-dsa> (Minor issue; update_config=1 not default; can 
be fixed future DSA or point release)
+       [jessie] - wpa 2.3-1+deb8u4
        NOTE: http://w1.fi/security/2016-1/
 CVE-2016-4413
        RESERVED
@@ -12403,7 +12403,7 @@
 CVE-2016-4338 [zabbix-agent: mysql.size shell command injection]
        RESERVED
        - zabbix 1:3.0.3+dfsg-1 (bug #823329)
-       [jessie] - zabbix <no-dsa> (Minor issue)
+       [jessie] - zabbix 1:2.2.7+dfsg-2+deb8u1
        NOTE: http://seclists.org/bugtraq/2016/May/11
        NOTE: https://support.zabbix.com/browse/ZBX-10741
 CVE-2016-4337
@@ -31677,9 +31677,9 @@
        NOTE: http://www.openwall.com/lists/oss-security/2015/09/01/1
 CVE-2015-6749 (Buffer overflow in the aiff_open function in oggenc/audio.c in 
...)
        {DLA-317-1}
-       [jessie] - vorbis-tools <no-dsa> (Minor issue)
+       - vorbis-tools 1.4.0-7 (bug #797461)
+       [jessie] - vorbis-tools 1.4.0-6+deb8u1
        [wheezy] - vorbis-tools <no-dsa> (Minor issue)
-       - vorbis-tools 1.4.0-7 (bug #797461)
        NOTE: http://www.openwall.com/lists/oss-security/2015/08/29/1
        NOTE: https://trac.xiph.org/ticket/2212
 CVE-2015-6741
@@ -48293,6 +48293,7 @@
 CVE-2014-9638 (oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a 
denial ...)
        {DLA-317-1}
        - vorbis-tools 1.4.0-7 (unimportant; bug #776086)
+       [jessie] - vorbis-tools 1.4.0-6+deb8u1
        - opus-tools <unfixed> (unimportant; bug #780160)
        NOTE: https://trac.xiph.org/ticket/2137
        NOTE: Fixed by: 
https://github.com/mark4o/opus-tools/commit/8c412e619b83eb6dd32191909cf6672e93e5802e
@@ -48301,7 +48302,7 @@
 CVE-2014-9639 (Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote 
...)
        {DLA-317-1}
        - vorbis-tools 1.4.0-7 (low; bug #776086)
-       [jessie] - vorbis-tools <no-dsa> (Minor issue)
+       [jessie] - vorbis-tools 1.4.0-6+deb8u1
        [wheezy] - vorbis-tools <no-dsa> (Minor issue)
        [squeeze] - vorbis-tools <no-dsa> (Minor issue)
        - opus-tools <unfixed> (bug #780160)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to