[Secure-testing-commits] r46033 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2016-11-07 07:18:18 +0000 (Mon, 07 Nov 2016)
New Revision: 46033

Modified:
   data/CVE/list
Log:
CVE-2016-8858/openssh note

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-07 06:32:20 UTC (rev 46032)
+++ data/CVE/list	2016-11-07 07:18:18 UTC (rev 46033)
@@ -1235,6 +1235,7 @@
 	[jessie] - openssh <no-dsa> (Minor issue)
 	[wheezy] - openssh <no-dsa> (Minor issue)
 	NOTE: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
+	NOTE: Only thing the attacker could do here is self-dos own connection
 CVE-2016-8862 [imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)]
 	RESERVED
 	- imagemagick <unfixed>