[Secure-testing-commits] r42015 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed May 25 15:42:45 UTC 2016


Author: carnil
Date: 2016-05-25 15:42:45 +0000 (Wed, 25 May 2016)
New Revision: 42015

Modified:
   data/CVE/list
Log:
Add note to CVE-2015-8806, according to upstream

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-25 15:24:38 UTC (rev 42014)
+++ data/CVE/list	2016-05-25 15:42:45 UTC (rev 42015)
@@ -8227,6 +8227,7 @@
 CVE-2015-8806 (dict.c in libxml2 allows remote attackers to cause a denial of service ...)
 	- libxml2 <unfixed> (bug #813613)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=749115
+	NOTE: Same fix as CVE-2016-1839 seems to resolve the issue
 CVE-2015-8805 (The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not ...)
 	- nettle 3.2-1 (bug #813679)
 	[jessie] - nettle 2.7.1-5+deb8u1




More information about the Secure-testing-commits mailing list