[Secure-testing-commits] r46491 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-23 20:15:08 +0000 (Wed, 23 Nov 2016)
New Revision: 46491

Modified:
   data/CVE/list
Log:
Update status for CVE-2016-7428/ntp

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-23 19:31:24 UTC (rev 46490)
+++ data/CVE/list	2016-11-23 20:15:08 UTC (rev 46491)
@@ -6429,7 +6429,12 @@
 CVE-2016-7428
 	RESERVED
 	- ntp 1:4.2.8p9+dfsg-1
+	[jessie] - ntp <not-affected> (Vulnerable code not present)
+	[wheezy] - ntp <not-affected> (Vulnerable code not present)
 	NOTE: http://support.ntp.org/bin/view/Main/NtpBug3113
+	NOTE: The fixes for CVE-2015-7973 have added several new integrity checks on incoming
+	NOTE: broadcast mode packets and issue got introduced with code changes to fix that
+	NOTE: issue.
 CVE-2016-7427
 	RESERVED
 	- ntp 1:4.2.8p9+dfsg-1