[Secure-testing-commits] r30856 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Dec 20 07:06:03 UTC 2014


Author: carnil
Date: 2014-12-20 07:06:03 +0000 (Sat, 20 Dec 2014)
New Revision: 30856

Modified:
   data/CVE/list
Log:
Add CVE-2014-8132/libssh

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-20 06:39:01 UTC (rev 30855)
+++ data/CVE/list	2014-12-20 07:06:03 UTC (rev 30856)
@@ -3919,8 +3919,10 @@
 	- linux <unfixed>
 	- linux-2.6 <removed>
 	NOTE: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/arch/x86?id=41bdc78544b8a93a9c6814b8bbbfef966272abbe
-CVE-2014-8132
+CVE-2014-8132 [Possible double free on a dangling pointer with crafted kexinit packet]
 	RESERVED
+	- libssh <unfixed>
+	NOTE: http://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/
 CVE-2014-8131 [deadlock and segfault in qemuConnectGetAllDomainStats]
 	RESERVED
 	- libvirt <unfixed>




More information about the Secure-testing-commits mailing list