[Secure-testing-commits] r41298 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-04-29 16:21:31 +0000 (Fri, 29 Apr 2016)
New Revision: 41298

Modified:
   data/CVE/list
Log:
CVE-2016-435{4,5}/libksba assigned

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-29 16:20:11 UTC (rev 41297)
+++ data/CVE/list	2016-04-29 16:21:31 UTC (rev 41298)
@@ -29095,14 +29095,22 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/13/5
 	NOTE: http://www.openwall.com/lists/oss-security/2016/04/29/5
 	NOTE: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=07116a314f4dcd4d96990bbd74db95a03a9f650a
-CVE-2015-XXXX [integer overflow in the BER decoder src/ber-decoder.c]
+CVE-2016-4355
 	- libksba 1.3.3-1 (low)
 	[squeeze] - libksba <no-dsa> (Minor issue)
 	[wheezy] - libksba <no-dsa> (Minor issue)
 	[jessie] - libksba <no-dsa> (Minor issue)
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/04/13/5
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/04/29/5
+	NOTE: http://www.openwall.com/lists/oss-security/2015/04/13/5
+	NOTE: http://www.openwall.com/lists/oss-security/2016/04/29/5
 	NOTE: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=aea7b6032865740478ca4b706850a5217f1c3887
+CVE-2016-4354
+	- libksba 1.3.3-1 (low)
+	[squeeze] - libksba <no-dsa> (Minor issue)
+	[wheezy] - libksba <no-dsa> (Minor issue)
+	[jessie] - libksba <no-dsa> (Minor issue)
+	NOTE: http://www.openwall.com/lists/oss-security/2015/04/13/5
+	NOTE: http://www.openwall.com/lists/oss-security/2016/04/29/5
+	NOTE: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=aea7b6032865740478ca4b706850a5217f1c3887
 CVE-2015-XXXX [integer overflow in the DN decoder src/dn.c]
 	- libksba 1.3.3-1 (low)
 	[squeeze] - libksba <no-dsa> (Minor issue)