[Secure-testing-commits] r15412 - data/CVE

Florian Weimer fw at alioth.debian.org
Sun Oct 3 19:35:29 UTC 2010


Author: fw
Date: 2010-10-03 19:35:25 +0000 (Sun, 03 Oct 2010)
New Revision: 15412

Modified:
   data/CVE/list
Log:
bind9 crasher affects lenny


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-10-03 09:01:52 UTC (rev 15411)
+++ data/CVE/list	2010-10-03 19:35:25 UTC (rev 15412)
@@ -89,6 +89,7 @@
 	TODO: check
 	NOTE: http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html
 	NOTE: ACL bypass claimed to only affect >=9.7.2: https://lists.isc.org/pipermail/bind-announce/2010-September/000655.html
+	NOTE: The crash with multiple trust anchors affects 9.6 and is fixed in 9.6-ESV-R2.
 CVE-2010-XXXX [horde3 XSS and CSRF]
 	- horde3 <unfixed> (bug #598582)
 	NOTE: http://lists.horde.org/archives/announce/2010/000568.html




More information about the Secure-testing-commits mailing list