[Secure-testing-commits] r40902 - data/CVE

Wed Apr 13 03:02:23 UTC 2016

Author: carnil
Date: 2016-04-13 03:02:23 +0000 (Wed, 13 Apr 2016)
New Revision: 40902

Modified:
   data/CVE/list
Log:
Add CVE-2015-8325

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-04-12 21:10:12 UTC (rev 40901)
+++ data/CVE/list	2016-04-13 03:02:23 UTC (rev 40902)
@@ -12457,8 +12457,10 @@
 	- cups-filters 1.2.0-1
 	[wheezy] - cups-filters <not-affected> (Vulnerable code not present; introduced in 1.0.42)
 	- foomatic-filters 4.0.17-7 (bug #806886)
-CVE-2015-8325
+CVE-2015-8325 [ignore PAM environment vars when UseLogin=yes]
 	RESERVED
+	- openssh <unfixed>
+	NOTE: Upstream fix: https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
 CVE-2015-XXXX [RCE in gitlab-shell 2.6.6-2.6.7]
 	- gitlab-shell <not-affected> (Only affects version 2.6.6-2.6.7)
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/11/25/5


