[Secure-testing-commits] r20326 - data/CVE

Thijs Kinkhorst thijs at alioth.debian.org
Wed Oct 10 18:48:37 UTC 2012


Author: thijs
Date: 2012-10-10 18:48:37 +0000 (Wed, 10 Oct 2012)
New Revision: 20326

Modified:
   data/CVE/list
Log:
squeeze fwknop does not share any code with wheezy+


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-10-10 18:39:26 UTC (rev 20325)
+++ data/CVE/list	2012-10-10 18:48:37 UTC (rev 20326)
@@ -2396,16 +2396,19 @@
 CVE-2012-4436 [local buffer overflow in --last processing with a maliciously constructed ~/.fwknop.run file]
 	RESERVED
 	- fwknop 2.0.3-1 (bug #688151)
+	[squeeze] - fwknop <not-affected> (Vulnerable code not present)
 	NOTE: http://seclists.org/oss-sec/2012/q3/509
 	NOTE: http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=a60f05ad44e824f6230b22f8976399340cb535dc
 CVE-2012-4435 [fwknop 2.0.3: server did not properly validate allow IP addresses ... ]
 	RESERVED
 	- fwknop 2.0.3-1 (bug #688151)
+	[squeeze] - fwknop <not-affected> (Vulnerable code not present)
 	NOTE: http://seclists.org/oss-sec/2012/q3/509
 	NOTE: http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=f4c16bc47fc24a96b63105556b62d61c1ba7d799
 CVE-2012-4434 [fwknop 2.0.3: multiple DoS / code execution flaw]
 	RESERVED
 	- fwknop 2.0.3-1 (bug #688151)
+	[squeeze] - fwknop <not-affected> (Vulnerable code not present)
 	NOTE: http://seclists.org/oss-sec/2012/q3/509
 	NOTE: http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=d46ba1c027a11e45821ba897a4928819bccc8f22
 CVE-2012-4433




More information about the Secure-testing-commits mailing list