[Secure-testing-commits] r38529 - data/CVE

Sat Dec 26 15:29:07 UTC 2015

Author: carnil
Date: 2015-12-26 15:29:07 +0000 (Sat, 26 Dec 2015)
New Revision: 38529

Modified:
   data/CVE/list
Log:
CVE-2015-8659/nghttp2 fixed

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-12-26 15:24:36 UTC (rev 38528)
+++ data/CVE/list	2015-12-26 15:29:07 UTC (rev 38529)
@@ -424,7 +424,7 @@
 	NOTE: OverlayFS introduced in https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c (v3.18-rc2)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/23/5
 CVE-2015-8659 [Use after free]
-	- nghttp2 <unfixed>
+	- nghttp2 1.6.0-1
 	NOTE: https://nghttp2.org/blog/2015/12/23/nghttp2-v1-6-0/
 	TODO: check versions
 CVE-2015-8628


