[Secure-testing-commits] r54663 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-08-12 02:15:48 +0000 (Sat, 12 Aug 2017)
New Revision: 54663

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
add and take botan in dsa-needed 


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-12 01:53:43 UTC (rev 54662)
+++ data/CVE/list	2017-08-12 02:15:48 UTC (rev 54663)
@@ -36986,10 +36986,9 @@
 CVE-2016-9132 (In Botan 1.8.0 through 1.11.33, when decoding BER data an integer ...)
 	{DLA-786-1}
 	- botan1.10 1.10.14-1
-	[jessie] - botan1.10 <no-dsa> (Minor issue)
+	[jessie] - botan1.10 <ignored> (Minor issue, not believed to be exploitable in practice)
 	NOTE: Fixed in 1.10.14 and 1.11.34, all prior versions affected.
 	NOTE: Fixed by: https://github.com/randombit/botan/commit/987ad747db6d0d7e36f840398f3cf02e2fbfd90f
-	NOTE: Not believed to be exploitable in practice
 CVE-2016-9131 (named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and ...)
 	{DSA-3758-1 DLA-805-1}
 	[experimental] - bind9 1:9.10.4-P5-1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-08-12 01:53:43 UTC (rev 54662)
+++ data/dsa-needed.txt	2017-08-12 02:15:48 UTC (rev 54663)
@@ -14,6 +14,8 @@
 --
 389-ds-base (fw)
 --
+botan1.10 (jmm)
+--
 cvs (seb)
   2017-08-11: ask Thorsten for debdiffs
 --