[Secure-testing-commits] r43738 - data/CVE

Markus Koschany apo at moszumanska.debian.org
Wed Aug 3 09:01:42 UTC 2016


Author: apo
Date: 2016-08-03 09:01:41 +0000 (Wed, 03 Aug 2016)
New Revision: 43738

Modified:
   data/CVE/list
Log:
CVE-2016-5419: Add link to patch


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-03 08:49:35 UTC (rev 43737)
+++ data/CVE/list	2016-08-03 09:01:41 UTC (rev 43738)
@@ -3322,6 +3322,8 @@
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://curl.haxx.se/docs/adv_20160803A.html
+	NOTE: Fixed by https://curl.haxx.se/CVE-2016-5419.patch
+	NOTE: Wheezy: vulnerable code is in lib/sslgen.c
 CVE-2016-5418
 	RESERVED
 CVE-2016-5417 [per-thread memory leak in __res_vinit with IPv6 nameservers]




More information about the Secure-testing-commits mailing list