[Secure-testing-commits] r37359 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Oct 26 21:03:34 UTC 2015


Author: carnil
Date: 2015-10-26 21:03:34 +0000 (Mon, 26 Oct 2015)
New Revision: 37359

Modified:
   data/CVE/list
Log:
Reference upstream tickets for krb5 issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-26 19:49:44 UTC (rev 37358)
+++ data/CVE/list	2015-10-26 21:03:34 UTC (rev 37359)
@@ -14311,14 +14311,17 @@
 	RESERVED
 	- krb5 1.13.2+dfsg-3 (bug #803088)
 	NOTE: https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789
+	NOTE: Upstream ticket: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252
 CVE-2015-2696 [IAKERB context aliasing bugs]
 	RESERVED
 	- krb5 1.13.2+dfsg-3 (bug #803084)
 	NOTE: https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a
+	NOTE: Upstream ticket: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244
 CVE-2015-2695 [SPNEGO context aliasing bugs]
 	RESERVED
 	- krb5 1.13.2+dfsg-3 (bug #803083)
 	NOTE: https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d
+	NOTE: Upstream ticket: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244
 CVE-2015-2694 (The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x ...)
 	- krb5 1.12.1+dfsg-20 (bug #783557)
 	[jessie] - krb5 <no-dsa> (Minor issue and can be fixed in a future DSA)




More information about the Secure-testing-commits mailing list