[Secure-testing-commits] r43739 - data/CVE

Markus Koschany apo at moszumanska.debian.org
Wed Aug 3 09:03:35 UTC 2016


Author: apo
Date: 2016-08-03 09:03:35 +0000 (Wed, 03 Aug 2016)
New Revision: 43739

Modified:
   data/CVE/list
Log:
CVE-2016-5420: Add link to patch


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-03 09:01:41 UTC (rev 43738)
+++ data/CVE/list	2016-08-03 09:03:35 UTC (rev 43739)
@@ -3318,6 +3318,8 @@
 	RESERVED
 	- curl <unfixed>
 	NOTE: https://curl.haxx.se/docs/adv_20160803B.html
+	NOTE: Fixed by https://curl.haxx.se/CVE-2016-5420.patch
+	NOTE: Wheezy: vulnerable code is in lib/sslgen.c
 CVE-2016-5419
 	RESERVED
 	- curl <unfixed>




More information about the Secure-testing-commits mailing list