[Secure-testing-commits] r41482 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-06 15:40:58 +0000 (Fri, 06 May 2016)
New Revision: 41482

Modified:
   data/CVE/list
Log:
Add two more CVEs assigned for squid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-06 15:38:29 UTC (rev 41481)
+++ data/CVE/list	2016-05-06 15:40:58 UTC (rev 41482)
@@ -11,6 +11,18 @@
 	NOTE: Introduced by: https://git.kernel.org/linus/0246e64d9a5fcd4805198de59b9b5cf1f974eb41 (v3.18-rc1)
 	NOTE: Exploitable since: https://git.kernel.org/linus/1be7f75d1668d6296b80bf35dcf6762393530afc (v4.4-rc1)
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/05/06/4
+CVE-2016-4556
+	- squid3 <unfixed>
+	- squid <not-affected> (Does not affect 2.x)
+	NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_9.txt
+	NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch
+	NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch
+CVE-2016-4555
+	- squid3 <unfixed>
+	- squid <not-affected> (Does not affect 2.x)
+	NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_9.txt
+	NOTE: http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch
+	NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch
 CVE-2016-4554 [Header Smuggling issue in HTTP Request processing]
 	- squid3 <unfixed>
 	- squid <removed>