[Secure-testing-commits] r40331 - data/CVE

Fri Mar 11 20:46:54 UTC 2016

Author: carnil
Date: 2016-03-11 20:46:54 +0000 (Fri, 11 Mar 2016)
New Revision: 40331

Modified:
   data/CVE/list
Log:
Reference upstream fix for CVE-2016-3115

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-03-11 20:33:05 UTC (rev 40330)
+++ data/CVE/list	2016-03-11 20:46:54 UTC (rev 40331)
@@ -450,6 +450,7 @@
 	NOTE: http://www.openssh.com/txt/x11fwd.adv
 	NOTE: Portable OpenSSH 7.2p2 contains a fix for this vulnerability.
 	NOTE: http://www.openwall.com/lists/oss-security/2016/03/10/8
+	NOTE: Upstream fix: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&sortby=date&f=h
 CVE-2016-XXXX [netfilter IPT_SO_SET_REPLACE memory corruption]
 	- linux <unfixed>
 	NOTE: https://code.google.com/p/google-security-research/issues/detail?id=758


