[Secure-testing-commits] r33783 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-23 11:45:50 +0000 (Thu, 23 Apr 2015)
New Revision: 33783

Modified:
   data/CVE/list
Log:
Add CVE-2015-1868/{pdns,pdns-recursor}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-23 10:26:00 UTC (rev 33782)
+++ data/CVE/list	2015-04-23 11:45:50 UTC (rev 33783)
@@ -3967,8 +3967,15 @@
 CVE-2015-1869
 	RESERVED
 	NOT-FOR-US: abrt is Red Hat / Fedora specific
-CVE-2015-1868
+CVE-2015-1868 [Label decompression bug can cause crashes on specific platforms]
 	RESERVED
+	- pdns <unfixed>
+	[wheezy] - pdns <not-affected> (3.2 and up affected)
+	[squeeze] - pdns <not-affected> (3.2 and up affected)
+	- pdns-recursor <unfixed>
+	[wheezy] - pdns-recursor <not-affected> (3.5 and up affected)
+	[squeeze] - pdns-recursor <not-affected> (3.5 and up affected)
+	NOTE: https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
 CVE-2015-1867 [acl read-only access allow role assignment]
 	RESERVED
 	- pacemaker <not-affected> (Vulnerable code not present)