[Secure-testing-commits] r44174 - in data: . CVE

Thorsten Alteholz alteholz at moszumanska.debian.org
Sat Aug 27 10:18:36 UTC 2016


Author: alteholz
Date: 2016-08-27 10:18:36 +0000 (Sat, 27 Aug 2016)
New Revision: 44174

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
the vulnerable code is not present in Wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-27 09:10:12 UTC (rev 44173)
+++ data/CVE/list	2016-08-27 10:18:36 UTC (rev 44174)
@@ -412,7 +412,8 @@
 	RESERVED
 CVE-2016-6902 [Shell outbreak due to bad syntax parse]
 	RESERVED
-	- lshell <unfixed> (bug #834949)
+	- lshell <unfixed> (bug #834949) 
+        [wheezy] - lshell <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/ghantoos/lshell/issues/147
 	NOTE: http://www.openwall.com/lists/oss-security/2016/08/22/15
 	NOTE: As for 2016-08-23 https://github.com/ghantoos/lshell/issues/147#issuecomment-241366750 ist still
@@ -421,6 +422,7 @@
 CVE-2016-6903 [Shell outbreak with multiline commands]
 	RESERVED
 	- lshell <unfixed> (bug #834946)
+        [wheezy] - lshell <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/ghantoos/lshell/issues/149
 	NOTE: http://www.openwall.com/lists/oss-security/2016/08/22/15
 CVE-2016-6897

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2016-08-27 09:10:12 UTC (rev 44173)
+++ data/dla-needed.txt	2016-08-27 10:18:36 UTC (rev 44174)
@@ -29,8 +29,6 @@
 --
 linux (Ben Hutchings)
 --
-lshell (Thorsten Alteholz)
---
 mailman
 --
 mat




More information about the Secure-testing-commits mailing list