[Secure-testing-commits] r42960 - data/CVE

Paul Mathijs Gevers elbrus at moszumanska.debian.org
Fri Jul 1 15:31:58 UTC 2016


Author: elbrus
Date: 2016-07-01 15:31:58 +0000 (Fri, 01 Jul 2016)
New Revision: 42960

Modified:
   data/CVE/list
Log:
CVE cacti remove no-dsa note about disputed fix as upstream fixed the fix

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-01 15:25:12 UTC (rev 42959)
+++ data/CVE/list	2016-07-01 15:31:58 UTC (rev 42960)
@@ -11514,14 +11514,11 @@
 	NOTE: Introduced by: https://git.kernel.org/linus/04b5d028f50ff05a8f9ae049ee71f8fdfcf1f5de (v2.6.30-rc2)
 CVE-2016-2313 (auth_login.php in Cacti before 0.8.8g allows remote authenticated ...)
 	- cacti 0.8.8g+ds1-1 (bug #814353)
-	[jessie] - cacti <no-dsa> (Might cause regressions for some setups, to risky, not fully right approach; disputed)
-	[wheezy] - cacti <no-dsa> (Might cause regressions for some setups, to risky, not fully right approach; disputed)
 	NOTE: http://svn.cacti.net/viewvc/cacti/tags/0.8.8g/docs/CHANGELOG?revision=7788&view=markup
 	NOTE: http://bugs.cacti.net/view.php?id=2656
 	NOTE: Upstream fix: http://svn.cacti.net/viewvc?view=rev&revision=7770
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=965930
 	NOTE: http://www.openwall.com/lists/oss-security/2016/02/09/3
-	NOTE: Issue might be disputed, see maintainers comment in https://bugs.debian.org/814353#10
 CVE-2016-2312 [KDE lockscreen bypass by switching display off and on]
 	RESERVED
 	- plasma-workspace 4:5.4.3-2 (bug #814355)




More information about the Secure-testing-commits mailing list