[Secure-testing-commits] r43099 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-07-10 17:31:43 +0000 (Sun, 10 Jul 2016)
New Revision: 43099

Modified:
   data/CVE/list
Log:
Update status for CVE-2015-8918

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-10 17:13:04 UTC (rev 43098)
+++ data/CVE/list	2016-07-10 17:31:43 UTC (rev 43099)
@@ -2364,11 +2364,10 @@
 	NOTE: Fixed by https://github.com/libarchive/libarchive/commit/e8a2e4d
 CVE-2015-8918
 	RESERVED
-	- libarchive 3.2.0-2
-	[jessie] - libarchive <not-affected> (unreproducible, problem cab rejected with 'Multivolume cabinet file is unsupported')
-	[wheezy] - libarchive <not-affected> (unreproducible)
+	- libarchive <not-affected> (Vulnerable code not in a released version)
+	NOTE: Introduced in  https://github.com/libarchive/libarchive/commit/cf8e67ffc8a2227b63fc6d3d1569b0214f160f54
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/b6ba56037f0da44efebfa271cc4b1a736a74c62f
 	NOTE: https://github.com/libarchive/libarchive/issues/506
-	NOTE: Fixed by https://github.com/libarchive/libarchive/commit/b6ba560
 CVE-2015-8917
 	RESERVED
 	- libarchive 3.2.0-2