[Secure-testing-commits] r17871 - data/CVE

[Florian Weimer]

Author: fw
Date: 2011-12-26 10:33:22 +0000 (Mon, 26 Dec 2011)
New Revision: 17871

Modified:
   data/CVE/list
Log:
CVE-2011-4862: more Kerberos code


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-12-24 21:14:18 UTC (rev 17870)
+++ data/CVE/list	2011-12-26 10:33:22 UTC (rev 17871)
@@ -176,6 +176,9 @@
 	RESERVED
 	- heimdal <unfixed> (high)
 	- inetutils <unfixed> (high)
+	- krb5 1.8+dfsg~aa+r23527-1 (high)
+	- krb5-appl <unfixed> (high)
+	NOTE: krb5 fixed through move of code to krb5-appl.
 CVE-2011-4861 (The modbus_125_handler function in the Schneider Electric Quantum ...)
 	NOT-FOR-US: Schneider Electric Quantum Ethernet Module
 CVE-2011-4860 (The ComputePassword function in the Schneider Electric Quantum ...)