[Secure-testing-commits] r38916 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-14 20:51:53 +0000 (Thu, 14 Jan 2016)
New Revision: 38916

Modified:
   data/CVE/list
Log:
Add two more entries for openssh

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-14 20:35:34 UTC (rev 38915)
+++ data/CVE/list	2016-01-14 20:51:53 UTC (rev 38916)
@@ -1,3 +1,9 @@
+CVE-2016-XXXX [Eliminate the fallback from untrusted X11-forwarding to trusted forwarding for cases when the X server disables the SECURITY extension]
+	- openssh 1:7.1p2-1
+	NOTE: https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
+CVE-2016-XXXX [Fix an out of-bound read access in the packet handling code]
+	- openssh 1:7.1p2-1
+	NOTE: https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0
 CVE-2016-1898
 	- ffmpeg <unfixed>
 	[squeeze] - ffmpeg <end-of-life> (Not supported in Squeeze LTS)