[Secure-testing-commits] r39737 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 17 06:12:59 UTC 2016


Author: carnil
Date: 2016-02-17 06:12:58 +0000 (Wed, 17 Feb 2016)
New Revision: 39737

Modified:
   data/CVE/list
Log:
Add CVE-2016-2390/squid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-16 22:38:45 UTC (rev 39736)
+++ data/CVE/list	2016-02-17 06:12:58 UTC (rev 39737)
@@ -13,6 +13,11 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1304794
 	NOTE: http://www.openwall.com/lists/oss-security/2016/02/16/2
 	TODO: check affected versions
+CVE-2016-2390 [Segfault on Certain SSL Handshake Errors]
+	- squid <removed> (unimportant)
+	- squid3 3.5.14-1 (unimportant)
+	NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_1.txt
+	NOTE: Only affects custom builds with --enable-ssl (disabled for license purposes in Debian)
 CVE-2016-2382
 	RESERVED
 CVE-2016-2381




More information about the Secure-testing-commits mailing list