[Secure-testing-commits] r35761 - in data: . CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-07-28 18:51:52 +0000 (Tue, 28 Jul 2015)
New Revision: 35761

Modified:
   data/CVE/list
   data/dla-needed.txt
   data/dsa-needed.txt
Log:
Add new bind9 issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-28 17:46:36 UTC (rev 35760)
+++ data/CVE/list	2015-07-28 18:51:52 UTC (rev 35761)
@@ -407,8 +407,10 @@
 	[wheezy] - libav <no-dsa> (Minor issue, can be fixed along in a future DSA)
 CVE-2015-5478
 	RESERVED
-CVE-2015-5477
+CVE-2015-5477 [An error in handling TKEY queries can cause named to exit with a REQUIRE assertion failure]
 	RESERVED
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/article/AA-01272/0
 CVE-2015-5476
 	RESERVED
 CVE-2015-5475

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2015-07-28 17:46:36 UTC (rev 35760)
+++ data/dla-needed.txt	2015-07-28 18:51:52 UTC (rev 35761)
@@ -10,6 +10,8 @@
 apache2 (Santiago R.R.)
   NOTE: pending, https://lists.debian.org/debian-lts/2015/07/msg00060.html
 --
+bind9 (carnil)
+--
 extplorer
 --
 flightgear

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-07-28 17:46:36 UTC (rev 35760)
+++ data/dsa-needed.txt	2015-07-28 18:51:52 UTC (rev 35761)
@@ -21,6 +21,8 @@
 aptdaemon
   For jessie-security compat layer for PackageKit needs to be dropped
 --
+bind9 (carnil)
+--
 eglibc (aurel32)
   some of the other no-dsa bugs could be fixed along
 --