[Secure-testing-commits] r42407 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jun 9 06:21:32 UTC 2016


Author: carnil
Date: 2016-06-09 06:21:32 +0000 (Thu, 09 Jun 2016)
New Revision: 42407

Modified:
   data/CVE/list
Log:
Add CVE-2015-1797

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-09 04:58:47 UTC (rev 42406)
+++ data/CVE/list	2016-06-09 06:21:32 UTC (rev 42407)
@@ -36281,8 +36281,12 @@
 	- ntp 1:4.2.6.p5+dfsg-6 (bug #782095)
 	NOTE: http://bugs.ntp.org/show_bug.cgi?id=2779
 	NOTE: http://support.ntp.org/bin/view/Main/SecurityNotice#ntpd_accepts_unauthenticated_pac
-CVE-2015-1797
+CVE-2015-1797 [Overflow in address computation in sbrk/brk]
 	RESERVED
+	- glibc <unfixed>
+	- eglibc <removed>
+	NOTE: Not a security issue, maybe thus CVE should be asked to be rejected
+	TODO: check, ask for reject
 CVE-2015-1796 (The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 ...)
 	- libopensaml2-java <removed> (bug #780383)
 	[jessie] - libopensaml2-java <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list