[Secure-testing-commits] r50738 - data/CVE

Tue Apr 18 03:10:22 UTC 2017

Author: carnil
Date: 2017-04-18 03:10:22 +0000 (Tue, 18 Apr 2017)
New Revision: 50738

Modified:
   data/CVE/list
Log:
Add CVE-2016-5396/trafficserver

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-18 03:10:03 UTC (rev 50737)
+++ data/CVE/list	2017-04-18 03:10:22 UTC (rev 50738)
@@ -34197,7 +34197,8 @@
 CVE-2016-5397
 	RESERVED
 CVE-2016-5396 (Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb ...)
-	TODO: check
+	- trafficserver 7.0.0-1
+	NOTE: https://issues.apache.org/jira/browse/TS-5019
 CVE-2016-5395 (Cross-site scripting (XSS) vulnerability in the create user ...)
 	NOT-FOR-US: Apache Ranger
 CVE-2016-5394


