[Secure-testing-commits] r42303 - data/CVE

Sat Jun 4 07:56:45 UTC 2016

Author: carnil
Date: 2016-06-04 07:56:45 +0000 (Sat, 04 Jun 2016)
New Revision: 42303

Modified:
   data/CVE/list
Log:
Update CVE-2015-8899/dnsmasq

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-06-04 07:44:17 UTC (rev 42302)
+++ data/CVE/list	2016-06-04 07:56:45 UTC (rev 42303)
@@ -423,8 +423,11 @@
 	RESERVED
 CVE-2015-8899 [denial of service - dnsmasq crashes querying any CNAME that points to localhost.localdomain]
 	- dnsmasq 2.76-1
+	[jessie] - dnsmasq <not-affected> (Vulnerable code introduced later)
+	[wheezy] - dnsmasq <not-affected> (Vulnerable code introduced later)
 	NOTE: http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010479.html
-	NOTE: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=41a8d9e99be9f2cc8b02051dd322cb45e0faac87
+	NOTE: Fixed by: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=41a8d9e99be9f2cc8b02051dd322cb45e0faac87 (v2.76rc1)
+	NOTE: Introduced by: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=cbc652423403e3cef00e00240f6beef713142246 (v2.73rc1)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1581181
 CVE-2015-8898 [Prevent null pointer access in magick/constitute.c]
 	RESERVED


