[Secure-testing-commits] r37777 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-11-19 14:39:57 +0000 (Thu, 19 Nov 2015)
New Revision: 37777

Modified:
   data/CVE/list
Log:
Update CVE-2015-8239/sudo, kept todo item for now

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-19 13:51:14 UTC (rev 37776)
+++ data/CVE/list	2015-11-19 14:39:57 UTC (rev 37777)
@@ -42,8 +42,10 @@
 	TODO: check versions
 CVE-2015-8239 [race condition checking digests/checksums in sudoers]
 	- sudo <unfixed>
+	[wheezy] - sudo <not-affected> (Command digests are only supported by version 1.8.7 or higher)
+	[squeeze] - sudo <not-affected> (Command digests are only supported by version 1.8.7 or higher)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/11/10/2
-	TODO: check
+	TODO: report
 CVE-2015-8234 [Use of MD5 in OpenStack Glance image signature]
 	- glance <unfixed>
 	TODO: check