[Secure-testing-commits] r41925 - data/CVE

[Balint Reczey]

Author: rbalint
Date: 2016-05-21 11:50:55 +0000 (Sat, 21 May 2016)
New Revision: 41925

Modified:
   data/CVE/list
Log:
CVE-2016-4078 of wireshark does not affect jessie

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-21 07:07:17 UTC (rev 41924)
+++ data/CVE/list	2016-05-21 11:50:55 UTC (rev 41925)
@@ -2161,7 +2161,10 @@
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-22.html
 CVE-2016-4078 (The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x ...)
 	- wireshark 2.0.3+geed34f0-1 (low)
+	[jessie] - wireshark <not-affected> (vulnerable code not present)
+	[wheezy] - wireshark <not-affected> (vulnerable code not present)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-21.html
+        NOTE: Upstream lists 1.12.x affected, I have contacted them for clarification
 CVE-2016-4077 (epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on ...)
 	- wireshark 2.0.3+geed34f0-1 (low)
 	[jessie] - wireshark <not-affected> (Only affects 2.x)