[Secure-testing-commits] r41276 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Fri Apr 29 10:31:54 UTC 2016
Author: carnil
Date: 2016-04-29 10:31:54 +0000 (Fri, 29 Apr 2016)
New Revision: 41276
Modified:
data/CVE/list
Log:
First round of ntp fixes added, need to check the ones from january
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-04-29 10:20:09 UTC (rev 41275)
+++ data/CVE/list 2016-04-29 10:31:54 UTC (rev 41276)
@@ -5016,23 +5016,23 @@
RESERVED
CVE-2016-2519
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-2518
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-2517
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: CVE-2016-2517 is for a regression caused by the patch for CVE-2016-2516
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-2516
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-2514
@@ -8374,27 +8374,27 @@
NOTE: https://github.com/facebook/hhvm/commit/f21dccdde582c61d5a9b52dd821bcb1f08169d28
CVE-2016-1551
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-1550
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-1549
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-1548
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-1547
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
TODO: check
CVE-2016-1546
@@ -14160,7 +14160,7 @@
RESERVED
CVE-2015-8158 [Potential Infinite Loop in ntpq]
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
NOTE: http://support.ntp.org/bin/view/Main/NtpBug2948
TODO: check
@@ -14212,7 +14212,7 @@
NOTE: Mitigated in 4.2.8p6
CVE-2015-8138 [ntp: missing check for zero originate timestamp]
RESERVED
- - ntp <unfixed>
+ - ntp 1:4.2.8p7+dfsg-1
NOTE: http://www.talosintel.com/reports/TALOS-2016-0077/
NOTE: https://github.com/ntp-project/ntp/commit/880191b72409a1965712999d248d70e6f7163af8
NOTE: The upstream fix for this issue is reported to be incomplete:
More information about the Secure-testing-commits
mailing list