[Secure-testing-commits] r32754 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Mar 10 16:42:32 UTC 2015


Author: carnil
Date: 2015-03-10 16:42:32 +0000 (Tue, 10 Mar 2015)
New Revision: 32754

Modified:
   data/CVE/list
Log:
Update status for CVE-2015-1783/lasso

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-10 16:33:06 UTC (rev 32753)
+++ data/CVE/list	2015-03-10 16:42:32 UTC (rev 32754)
@@ -1091,7 +1091,10 @@
 CVE-2015-1783 [use of uninitialized value leading to a crash]
 	RESERVED
 	- lasso 2.4.1-1
-	NOTE: Upstream fix: https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd
+	[wheezy] - lasso <not-affected> (Vulnerable code introduced later)
+	[squeeze] - lasso <not-affected> (Vulnerable code introduced later)
+	NOTE: Upstream fix: https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd (v2.4.1)
+	NOTE: Introduced by: https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=154812b401e3845977b3a4892dbc5e5a0b9d03cf (v2.4.0)
 CVE-2015-1782
 	RESERVED
 CVE-2015-1781




More information about the Secure-testing-commits mailing list