[Secure-testing-commits] r47067 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Dec 14 16:31:51 UTC 2016


Author: carnil
Date: 2016-12-14 16:31:51 +0000 (Wed, 14 Dec 2016)
New Revision: 47067

Modified:
   data/CVE/list
Log:
Add CVE-2016-7030

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-14 16:09:48 UTC (rev 47066)
+++ data/CVE/list	2016-12-14 16:31:51 UTC (rev 47067)
@@ -16301,8 +16301,11 @@
 	NOTE: http://tracker.ceph.com/issues/13207
 	NOTE: https://github.com/ceph/ceph/pull/6057
 	NOTE: https://github.com/ceph/ceph/pull/11045
-CVE-2016-7030
+CVE-2016-7030 [DoS attack against kerberized services by abusing password policy]
 	RESERVED
+	- freeipa <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1370493
+	TODO: check if applies to Debian package as well, builds at least with Kerberos support
 CVE-2016-7029
 	RESERVED
 CVE-2016-7027




More information about the Secure-testing-commits mailing list