[Secure-testing-commits] r38951 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jan 15 14:07:17 UTC 2016


Author: carnil
Date: 2016-01-15 14:07:17 +0000 (Fri, 15 Jan 2016)
New Revision: 38951

Modified:
   data/CVE/list
Log:
Revert mistakenly added fixed version for one temporary entry

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-15 13:32:00 UTC (rev 38950)
+++ data/CVE/list	2016-01-15 14:07:17 UTC (rev 38951)
@@ -389,9 +389,10 @@
 CVE-2016-1716
 	RESERVED
 CVE-2016-XXXX [Eliminate the fallback from untrusted X11-forwarding to trusted forwarding for cases when the X server disables the SECURITY extension]
-	- openssh 1:7.1p2-1
+	- openssh <unfixed>
 	NOTE: https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
 	NOTE: Background information on X11 SECURITY extension and SSH: https://thejh.net/written-stuff/openssh-6.8-xsecurity
+	NOTE: https://lists.mindrot.org/pipermail/openssh-unix-dev/2016-January/034684.html
 CVE-2016-XXXX [Fix an out of-bound read access in the packet handling code]
 	- openssh 1:7.1p2-1
 	[squeeze] - openssh <not-affected> (Issue introduced in OpenSSH 6.8)




More information about the Secure-testing-commits mailing list