[Secure-testing-commits] r45133 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-07 14:33:58 +0000 (Fri, 07 Oct 2016)
New Revision: 45133

Modified:
   data/CVE/list
Log:
Update CVE-2016-7797 according to Ferenc Wagner (wferi)

Reference: https://lists.alioth.debian.org/pipermail/debian-ha-maintainers/2016-October/005510.html

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-07 13:13:21 UTC (rev 45132)
+++ data/CVE/list	2016-10-07 14:33:58 UTC (rev 45133)
@@ -2242,8 +2242,10 @@
 CVE-2016-7797
 	RESERVED
 	- pacemaker 1.1.15~rc3-1
+	[wheezy] - pacemaker <not-affected> (Vulnerable code introduced after 1.1.10)
 	NOTE: http://bugs.clusterlabs.org/show_bug.cgi?id=5269
-	NOTE: https://github.com/ClusterLabs/pacemaker/commit/5ec24a26 (Pacemaker-1.1.15-rc1)
+	NOTE: Fixed by: https://github.com/ClusterLabs/pacemaker/commit/5ec24a26 (Pacemaker-1.1.15-rc1)
+	NOTE: Vulnerable code introduced in: https://github.com/ClusterLabs/pacemaker/commit/87f4091 (Pacemaker-1.1.12-rc1)
 CVE-2016-7796
 	RESERVED
 	- systemd 231-9 (bug #839607)