[Secure-testing-commits] r45472 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-20 08:52:28 +0000 (Thu, 20 Oct 2016)
New Revision: 45472

Modified:
   data/CVE/list
Log:
Add CVE-2016-8858/openssh and mark as no-dsa for jessie

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-20 07:35:59 UTC (rev 45471)
+++ data/CVE/list	2016-10-20 08:52:28 UTC (rev 45472)
@@ -2,6 +2,10 @@
 	- tre <unfixed>
 	- musl <unfixed>
 	NOTE: http://www.openwall.com/lists/oss-security/2016/10/19/1
+CVE-2016-8858
+	- openssh <unfixed>
+	[jessie] - openssh <no-dsa> (Minor issue)
+	NOTE: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
 CVE-2016-8862 [imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)]
 	- imagemagick <unfixed>
 	NOTE: https://blogs.gentoo.org/ago/2016/10/17/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c/