[Secure-testing-commits] r45666 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-27 16:34:10 +0000 (Thu, 27 Oct 2016)
New Revision: 45666

Modified:
   data/CVE/list
Log:
Add note for CVE-2016-6662 and mysql-5.5

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-27 15:07:00 UTC (rev 45665)
+++ data/CVE/list	2016-10-27 16:34:10 UTC (rev 45666)
@@ -6765,6 +6765,9 @@
 	NOTE: MariaDB: https://jira.mariadb.org/browse/MDEV-10465
 	NOTE: Fixed in upstream MariaDB  5.5.51, 10.0.27, 10.1.17
 	NOTE: PerconaDB: https://www.percona.com/blog/2016/09/12/database-affected-cve-2016-6662/
+	NOTE: Although Oracle mentions this CVE only to be fixed in 5.5.53 this is not
+	NOTE: true for src:mysql-5.5 as in Debian and other Linux distributions, so
+	NOTE: this CVE should not be listed for a DSA/DLA based on 5.5.53, cf #841050
 CVE-2016-6661
 	RESERVED
 CVE-2016-6660