[Secure-testing-commits] r38265 - data/CVE

Sun Dec 13 15:29:04 UTC 2015

Author: carnil
Date: 2015-12-13 15:29:04 +0000 (Sun, 13 Dec 2015)
New Revision: 38265

Modified:
   data/CVE/list
Log:
Update status for CVE-2015-8547/quassel

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-12-13 15:13:48 UTC (rev 38264)
+++ data/CVE/list	2015-12-13 15:29:04 UTC (rev 38265)
@@ -15,7 +15,11 @@
 	NOTE: Fixed in 2.6.0
 CVE-2015-8547 [quassel: op command denial of service issue]
 	- quassel <unfixed> (bug #807801)
+	[wheezy] - quassel <not-affected> (Vulnerable code not present)
+	[squeeze] - quassel <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/quassel/quassel/commit/b8edbda019eeb99da8663193e224efc9d1265dc7
+	NOTE: Support for oping a whole channel with /op * was only added in
+	NOTE: https://github.com/quassel/quassel/commit/7ecbc1bf921880f7b03af779de7d9611853a0d46 (0.10-beta1)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/12/1
 CVE-2015-8541
 	RESERVED


