[Secure-testing-commits] r37240 - data/CVE

Thu Oct 22 13:40:10 UTC 2015

Author: carnil
Date: 2015-10-22 13:40:09 +0000 (Thu, 22 Oct 2015)
New Revision: 37240

Modified:
   data/CVE/list
Log:
Add note about broken fix for CVE-2015-7704, thanks mdeslaur

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-10-22 12:55:13 UTC (rev 37239)
+++ data/CVE/list	2015-10-22 13:40:09 UTC (rev 37240)
@@ -481,6 +481,8 @@
 	RESERVED
 	- ntp 1:4.2.8p4+dfsg-1
 	NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
+	NOTE: mdeslaur> FYI, the ntp fix for CVE-2015-7704 is apparently broken,
+	NOTE: mdeslaur> see http://lists.ntp.org/pipermail/pool/2015-October/007631.html
 CVE-2015-7703
 	RESERVED
 	- ntp <undetermined>


