[Secure-testing-commits] r45368 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-16 11:42:23 +0000 (Sun, 16 Oct 2016)
New Revision: 45368

Modified:
   data/CVE/list
Log:
CVE-2011-1775/tigervnc not affected, fixed before initial release to Debian

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-16 11:38:28 UTC (rev 45367)
+++ data/CVE/list	2016-10-16 11:42:23 UTC (rev 45368)
@@ -125282,7 +125282,8 @@
 	{DSA-2264-1 DSA-2240-1}
 	- linux-2.6 2.6.39-1 (low)
 CVE-2011-1775 (The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx ...)
-	- tigervnc <undetermined>
+	- tigervnc <not-affected> (Fixed before initial release in Debian)
+	NOTE: https://github.com/TigerVNC/tigervnc/commit/ce6c8b097f0d5b161039dc8c8208aff078d433ff
 CVE-2011-1774 (WebKit in Apple Safari before 5.0.6 has improper libxslt security ...)
 	NOTE: CVE-2011-1774 is about webkit's interface to xmlsec, CVE-2011-1425 is the actual issue
 	NOTE: http://www.openwall.com/lists/oss-security/2011/05/09/4