[Secure-testing-commits] r44174 - in data: . CVE
Thorsten Alteholz
alteholz at moszumanska.debian.org
Sat Aug 27 10:18:36 UTC 2016
Author: alteholz
Date: 2016-08-27 10:18:36 +0000 (Sat, 27 Aug 2016)
New Revision: 44174
Modified:
data/CVE/list
data/dla-needed.txt
Log:
the vulnerable code is not present in Wheezy
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-08-27 09:10:12 UTC (rev 44173)
+++ data/CVE/list 2016-08-27 10:18:36 UTC (rev 44174)
@@ -412,7 +412,8 @@
RESERVED
CVE-2016-6902 [Shell outbreak due to bad syntax parse]
RESERVED
- - lshell <unfixed> (bug #834949)
+ - lshell <unfixed> (bug #834949)
+ [wheezy] - lshell <not-affected> (Vulnerable code not present)
NOTE: https://github.com/ghantoos/lshell/issues/147
NOTE: http://www.openwall.com/lists/oss-security/2016/08/22/15
NOTE: As for 2016-08-23 https://github.com/ghantoos/lshell/issues/147#issuecomment-241366750 ist still
@@ -421,6 +422,7 @@
CVE-2016-6903 [Shell outbreak with multiline commands]
RESERVED
- lshell <unfixed> (bug #834946)
+ [wheezy] - lshell <not-affected> (Vulnerable code not present)
NOTE: https://github.com/ghantoos/lshell/issues/149
NOTE: http://www.openwall.com/lists/oss-security/2016/08/22/15
CVE-2016-6897
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2016-08-27 09:10:12 UTC (rev 44173)
+++ data/dla-needed.txt 2016-08-27 10:18:36 UTC (rev 44174)
@@ -29,8 +29,6 @@
--
linux (Ben Hutchings)
--
-lshell (Thorsten Alteholz)
---
mailman
--
mat
More information about the Secure-testing-commits
mailing list