[Secure-testing-commits] r47331 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Dec 22 09:33:21 UTC 2016


Author: carnil
Date: 2016-12-22 09:33:21 +0000 (Thu, 22 Dec 2016)
New Revision: 47331

Modified:
   data/CVE/list
Log:
Mark curl issue as not-affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-22 08:40:16 UTC (rev 47330)
+++ data/CVE/list	2016-12-22 09:33:21 UTC (rev 47331)
@@ -25264,8 +25264,7 @@
 CVE-2016-4803 (CRLF injection vulnerability in the send email functionality in dotCMS ...)
 	NOT-FOR-US: dotCMS
 CVE-2016-4802 (Multiple untrusted search path vulnerabilities in cURL and libcurl ...)
-	- curl <unfixed>
-	TODO: check
+	- curl <not-affected> (Windows only)
 CVE-2016-4801
 	RESERVED
 CVE-2016-4800




More information about the Secure-testing-commits mailing list