[Secure-testing-commits] r38055 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-02 17:22:56 +0000 (Wed, 02 Dec 2015)
New Revision: 38055

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-8383

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-02 16:46:14 UTC (rev 38054)
+++ data/CVE/list	2015-12-02 17:22:56 UTC (rev 38055)
@@ -6979,10 +6979,12 @@
 	TODO: check
 CVE-2015-8383 [mishandles certain repeated conditional groups]
 	- pcre3 <unfixed>
+	[wheezy] - pcre3 <not-affected> (vulnerable coded introduce in 8.34)
+	[squeeze] - pcre3 <not-affected> (vulnerable code introduced in 8.34)
 	NOTE: Fixed in 8.38
 	NOTE: http://www.openwall.com/lists/oss-security/2015/11/29/1
-	NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1557
-	TODO: check
+	NOTE: Fixed by http://vcs.pcre.org/pcre?view=revision&revision=1557
+	NOTE: Introduced by http://vcs.pcre.org/pcre?view=revision&revision=1394
 CVE-2015-8382 [Information disclosure]
 	- pcre3 2:8.35-7.2 (bug #794589)
 	[jessie] - pcre3 <no-dsa> (Minor issue)