[Secure-testing-commits] r43368 - data/CVE
security tracker role
sectracker at moszumanska.debian.org
Fri Jul 22 09:10:11 UTC 2016
Author: sectracker
Date: 2016-07-22 09:10:11 +0000 (Fri, 22 Jul 2016)
New Revision: 43368
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-07-22 08:55:29 UTC (rev 43367)
+++ data/CVE/list 2016-07-22 09:10:11 UTC (rev 43368)
@@ -5505,14 +5505,14 @@
NOTE: Exploitable since: https://git.kernel.org/linus/1be7f75d1668d6296b80bf35dcf6762393530afc (v4.4-rc1)
NOTE: http://www.openwall.com/lists/oss-security/2016/05/06/4
CVE-2016-4556 (Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.19-1 (bug #823968)
- squid <not-affected> (Does not affect 2.x)
NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_9.txt
NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch
NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch
CVE-2016-4555 (client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.19-1 (bug #823968)
[wheezy] - squid3 <not-affected> (3.1 not vulnerable)
- squid <not-affected> (Does not affect 2.x)
@@ -5520,7 +5520,7 @@
NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch
NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch
CVE-2016-4554 (mime_header.cc in Squid before 3.5.18 allows remote attackers to ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.19-1 (bug #823968)
- squid <removed>
NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_8.txt
@@ -7067,7 +7067,7 @@
- typo3-src <removed>
[wheezy] - typo3-src <end-of-life> (See DSA 3314)
CVE-2016-4054 (Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.17-1
- squid <not-affected> (Squid 2.x are not vulnerable)
NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
@@ -7076,7 +7076,7 @@
NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13235.patch (Squid 3.4)
NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14034.patch (Squid 3.5)
CVE-2016-4053 (Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.17-1
- squid <not-affected> (Squid 2.x are not vulnerable)
NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
@@ -7085,7 +7085,7 @@
NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13235.patch (Squid 3.4)
NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14034.patch (Squid 3.5)
CVE-2016-4052 (Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.17-1
- squid <not-affected> (Squid 2.x are not vulnerable)
NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
@@ -7094,7 +7094,7 @@
NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13235.patch (Squid 3.4)
NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14034.patch (Squid 3.5)
CVE-2016-4051 (Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and ...)
- {DLA-478-1}
+ {DSA-3625-1 DLA-478-1}
- squid3 3.5.17-1
- squid <removed>
[wheezy] - squid <not-affected> (cachemgr.cgi not installed. squid-cgi binary package built from squid3)
More information about the Secure-testing-commits
mailing list