[Secure-testing-commits] r45535 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Oct 24 04:32:38 UTC 2016


Author: carnil
Date: 2016-10-24 04:32:38 +0000 (Mon, 24 Oct 2016)
New Revision: 45535

Modified:
   data/CVE/list
Log:
Add fixed version for guile-2.0

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-24 03:15:26 UTC (rev 45534)
+++ data/CVE/list	2016-10-24 04:32:38 UTC (rev 45535)
@@ -401,14 +401,14 @@
 CVE-2016-8606 [REPL server vulnerable to HTTP inter-protocol attacks]
 	RESERVED
 	{DLA-666-1}
-	- guile-2.0 <unfixed> (low; bug #840555)
+	- guile-2.0 2.0.13+1-1 (low; bug #840555)
 	[jessie] - guile-2.0 <no-dsa> (Minor issue)
 	- guile-1.8 <not-affected> (repl server introduced in 2.0)
 	NOTE: Patch: http://git.savannah.gnu.org/cgit/guile.git/commit/?h=stable-2.0&id=08c021916dbd3a235a9f9cc33df4c418c0724e03
 CVE-2016-8605 [Thread-unsafe umask modification]
 	RESERVED
 	{DLA-666-1}
-	- guile-2.0 <unfixed> (low; bug #840556)
+	- guile-2.0 2.0.13+1-1 (low; bug #840556)
 	[jessie] - guile-2.0 <no-dsa> (Minor issue)
 	- guile-1.8 <removed> (low; bug #841494)
 	[jessie] - guile-1.8 <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list