[Secure-testing-commits] r33509 - data/CVE

Fri Apr 10 21:38:34 UTC 2015

Author: kroeckx
Date: 2015-04-10 21:38:34 +0000 (Fri, 10 Apr 2015)
New Revision: 33509

Modified:
   data/CVE/list
Log:
Add fixed numbers for ntp-keygen randomness issue


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-04-10 21:28:05 UTC (rev 33508)
+++ data/CVE/list	2015-04-10 21:38:34 UTC (rev 33509)
@@ -2,6 +2,8 @@
 	- ceph-deploy <itp> (bug #694013)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/09/9
 CVE-2015-XXXX [ntp-keygen may generate non-random symmetric keys on big-endian systems]
+	- ntp 1:4.2.6.p2+dfsg-1+deb6u3
+	- ntp 1:1:4.2.6.p5+dfsg-2+deb7u4
 	- ntp 1:4.2.6.p5+dfsg-7
 	NOTE: https://bugs.ntp.org/show_bug.cgi?id=2797
 	NOTE: Patch: http://bk1.ntp.org/ntp-stable/?PAGE=patch&REV=55199296N2gFqH1Hm5GOnhrk9Ypygg


