[Secure-testing-commits] r33434 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-08 16:54:50 +0000 (Wed, 08 Apr 2015)
New Revision: 33434

Modified:
   data/CVE/list
Log:
Reference upstream commits for chrony

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-08 16:48:24 UTC (rev 33433)
+++ data/CVE/list	2015-04-08 16:54:50 UTC (rev 33434)
@@ -2832,6 +2832,7 @@
 CVE-2015-1853 [authentication doesn't protect symmetric associations against DoS attacks]
 	RESERVED
 	- chrony <unfixed>
+	NOTE: Fix: http://git.tuxfamily.org/chrony/chrony.git/commit/?h=1.31-security&id=d856bd34c4862398411d29200520e3a3b1d4569e
 CVE-2015-1852
 	RESERVED
 CVE-2015-1851
@@ -2898,12 +2899,14 @@
 	RESERVED
 CVE-2015-1823
 	RESERVED
-CVE-2015-1822
+CVE-2015-1822 [uninitialized pointer in cmdmon reply slots]
 	RESERVED
 	- chrony <unfixed>
-CVE-2015-1821
+	NOTE: Fix: http://git.tuxfamily.org/chrony/chrony.git/commit/?h=1.31-security&id=79eacdb7e694c7e6681b68006425df3faca51aec
+CVE-2015-1821 [Heap out of bound write in address filter]
 	RESERVED
 	- chrony <unfixed>
+	NOTE: Fix: http://git.tuxfamily.org/chrony/chrony.git/commit/?h=1.31-security&id=cf19042ecb656b8afec0cc4906e7dd3ea9266ac8
 CVE-2015-1820 [session fixation vulnerability]
 	RESERVED
 	- ruby-rest-client <unfixed> (bug #781238)