[Secure-testing-commits] r48787 - data/CVE

[Paul Wise]

Author: pabs
Date: 2017-02-09 04:59:58 +0000 (Thu, 09 Feb 2017)
New Revision: 48787

Modified:
   data/CVE/list
Log:
CVE-2016-6271 is from src:bzrtp and has an upstream patch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-09 01:41:32 UTC (rev 48786)
+++ data/CVE/list	2017-02-09 04:59:58 UTC (rev 48787)
@@ -25366,7 +25366,8 @@
 	NOTE: http://git.php.net/?p=php-src.git;a=commit;h=0218acb7e756a469099c4ccfb22bce6c2bd1ef87
 	NOTE: Fixed in 7.0.9, 5.6.24, 5.5.38
 CVE-2016-6271 (The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows ...)
-	TODO: check
+	- bzrtp <unfixed>
+	NOTE: Fixed by: https://github.com/BelledonneCommunications/bzrtp/commit/bbb1e6e2f467ee4bd7b9a8c800e4f07343d7d99b
 CVE-2016-6270 (The handle_certificate function in ...)
 	NOT-FOR-US: Trend Micro
 CVE-2016-6269 (Multiple directory traversal vulnerabilities in Trend Micro Smart ...)