[Secure-testing-commits] r46538 - in data: . CVE

Raphaël Hertzog hertzog at moszumanska.debian.org
Fri Nov 25 11:04:16 UTC 2016


Author: hertzog
Date: 2016-11-25 11:04:16 +0000 (Fri, 25 Nov 2016)
New Revision: 46538

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Mark CVE-2016-7553 as no-dsa on wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-25 11:04:07 UTC (rev 46537)
+++ data/CVE/list	2016-11-25 11:04:16 UTC (rev 46538)
@@ -3882,6 +3882,7 @@
 	RESERVED
 	- irssi 0.8.20-2 (bug #838762)
 	[jessie] - irssi <no-dsa> (Can be fixed in point release, minor issue)
+	[wheezy] - irssi <no-dsa> (Minor issue, information leak only on multi-user systems)
 	NOTE: Fixed by: https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a
 	NOTE: https://irssi.org/2016/09/22/buf.pl-update/
 	NOTE: http://www.openwall.com/lists/oss-security/2016/09/24/1

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2016-11-25 11:04:07 UTC (rev 46537)
+++ data/dla-needed.txt	2016-11-25 11:04:16 UTC (rev 46538)
@@ -33,10 +33,6 @@
   NOTE: 20161123: All open CVEs have been identified and patches integrated.
   NOTE: Working to resolve unit test failures caused by some of the patches.
 --
-irssi
-  NOTE: rhonda at d.o is preparing an upload? (doesn't seem to be
-  NOTE: confirmed, no reply to 87bmy8bcyv.fsf at angela.anarc.at?
---
 jasper (Thorsten Alteholz)
 --
 libav (Hugo Lefeuvre)




More information about the Secure-testing-commits mailing list