[Secure-testing-commits] r41610 - data/CVE

Tue May 10 15:14:22 UTC 2016

Author: santiago
Date: 2016-05-10 15:14:22 +0000 (Tue, 10 May 2016)
New Revision: 41610

Modified:
   data/CVE/list
Log:
CVE-2016-4553/squid3: add note

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-05-10 15:02:17 UTC (rev 41609)
+++ data/CVE/list	2016-05-10 15:14:22 UTC (rev 41610)
@@ -122,6 +122,7 @@
 	- squid <not-affected> (Does not affect 2.x)
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_7.txt
 	NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch
+	NOTE: Fix relies on SBuf, not present in jessie nor wheezy. Maybe too intrusive
 CVE-2016-4535 (Integer signedness error in the AV engine before DAT 8145, as used in ...)
 	NOT-FOR-US: McAfee / AV engine
 CVE-2016-4534 (The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan ...)


