[Secure-testing-commits] r30120 - in data: . CVE

Raphaël Hertzog hertzog at moszumanska.debian.org
Tue Nov 18 10:59:22 UTC 2014


Author: hertzog
Date: 2014-11-18 10:59:22 +0000 (Tue, 18 Nov 2014)
New Revision: 30120

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
CVE-2014-8483: add konversation to dla-needed, mark quassel as not-affected on Squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-18 10:59:12 UTC (rev 30119)
+++ data/CVE/list	2014-11-18 10:59:22 UTC (rev 30120)
@@ -765,6 +765,7 @@
 CVE-2014-8483 (The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 ...)
 	{DSA-3068-1 DSA-3063-1}
 	- quassel 0.10.0-2.1 (bug #766962)
+	[squeeze] - quassel <not-affected> (Problematic code does not exist in 0.6.3-2+squeeze2)
 	NOTE: https://github.com/quassel/quassel/commit/8b5ecd226f9208af3074b33d3b7cf5e14f55b138
 	NOTE: http://bugs.quassel-irc.org/issues/1314
 	- konversation 1.5-2 (bug #768191)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2014-11-18 10:59:12 UTC (rev 30119)
+++ data/dla-needed.txt	2014-11-18 10:59:22 UTC (rev 30120)
@@ -27,6 +27,8 @@
 -- 
 imagemagick
 --
+konversation
+--
 libextlib-ruby
   NOTE: debdiff of Salvatore Bonaccorso ready in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697895#23
 --




More information about the Secure-testing-commits mailing list