[Secure-testing-commits] r34987 - data/CVE

[Alessandro Ghedini]

Author: ghedo
Date: 2015-06-17 07:44:55 +0000 (Wed, 17 Jun 2015)
New Revision: 34987

Modified:
   data/CVE/list
Log:
Add curl issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-17 06:13:25 UTC (rev 34986)
+++ data/CVE/list	2015-06-17 07:44:55 UTC (rev 34987)
@@ -3273,10 +3273,20 @@
 	RESERVED
 CVE-2015-3238
 	RESERVED
-CVE-2015-3237
+CVE-2015-3237 [SMB send off unrelated memory contents]
 	RESERVED
-CVE-2015-3236
+	- curl 7.43.0-1
+	[jessie] - curl <not-affected> (Vulnerable code not present)
+	[wheezy] - curl <not-affected> (Vulnerable code not present)
+	[squeeze] - curl <not-affected> (Vulnerable code not present)
+	NOTE: http://curl.haxx.se/docs/adv_20150617B.html
+CVE-2015-3236 [lingering HTTP credentials in connection re-use]
 	RESERVED
+	- curl 7.43.0-1
+	[jessie] - curl <not-affected> (Vulnerable code not present)
+	[wheezy] - curl <not-affected> (Vulnerable code not present)
+	[squeeze] - curl <not-affected> (Vulnerable code not present)
+	NOTE: http://curl.haxx.se/docs/adv_20150617A.html
 CVE-2015-3235
 	RESERVED
 	- foreman <itp> (bug #663101)