[Secure-testing-commits] r40295 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-10 12:52:00 +0000 (Thu, 10 Mar 2016)
New Revision: 40295

Modified:
   data/CVE/list
Log:
Add openssh issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-10 11:33:00 UTC (rev 40294)
+++ data/CVE/list	2016-03-10 12:52:00 UTC (rev 40295)
@@ -1,3 +1,8 @@
+CVE-2016-XXXX [xauth command injection]
+	- openssh <unfixed>
+	NOTE: http://www.openssh.com/txt/x11fwd.adv
+	NOTE: Portable OpenSSH 7.2p2 contains a fix for this vulnerability.
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/03/10/8
 CVE-2016-XXXX [netfilter IPT_SO_SET_REPLACE memory corruption]
 	- linux <unfixed>
 	NOTE: https://code.google.com/p/google-security-research/issues/detail?id=758