[Secure-testing-commits] r44884 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-09-25 09:33:09 +0000 (Sun, 25 Sep 2016)
New Revision: 44884

Modified:
   data/CVE/list
Log:
Add comment for CVE-2015-8915

Did'nt want to risk it this time, the second patch was thuough now
longer already applied in ubuntu, so should be safe.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-25 09:30:28 UTC (rev 44883)
+++ data/CVE/list	2016-09-25 09:33:09 UTC (rev 44884)
@@ -9343,11 +9343,12 @@
 CVE-2015-8915 (bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a ...)
 	{DLA-617-1}
 	- libarchive 3.2.0-2 (low; bug #784213)
-	[jessie] - libarchive <no-dsa> (Minor issue)
+	[jessie] - libarchive <no-dsa> (Minor issue; can potentially be included in future DSA)
 	[squeeze] - libarchive <no-dsa> (Minor issue)
 	NOTE: https://github.com/libarchive/libarchive/issues/503
 	NOTE: https://github.com/libarchive/libarchive/issues/502 (duplicate of https://github.com/libarchive/libarchive/issues/503)
-	NOTE: Fixed by https://github.com/libarchive/libarchive/commit/e6c9668f3202215ddb71617b41c19b6f05acf008
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/e6c9668f3202215ddb71617b41c19b6f05acf008
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/3865cf2bcb0eebc1baef28a7841b1cadae6e0f7c
 CVE-2015-8914 (The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 ...)
 	- neutron 2:8.1.2-1
 	[jessie] - neutron <no-dsa> (Minor issue)