[Secure-testing-commits] r37349 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-10-26 18:52:14 +0000 (Mon, 26 Oct 2015)
New Revision: 37349

Modified:
   data/CVE/list
Log:
Add CVE-2015-2695/krb5

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-26 18:52:06 UTC (rev 37348)
+++ data/CVE/list	2015-10-26 18:52:14 UTC (rev 37349)
@@ -14308,8 +14308,10 @@
 	RESERVED
 	- krb5 <unfixed>
 	NOTE: https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a
-CVE-2015-2695
+CVE-2015-2695 [SPNEGO context aliasing bugs]
 	RESERVED
+	- krb5 <unfixed>
+	NOTE: https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d
 CVE-2015-2694 (The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x ...)
 	- krb5 1.12.1+dfsg-20 (bug #783557)
 	[jessie] - krb5 <no-dsa> (Minor issue and can be fixed in a future DSA)