[Secure-testing-commits] r48393 - data/CVE

Thu Jan 26 05:21:21 UTC 2017

Author: carnil
Date: 2017-01-26 05:21:21 +0000 (Thu, 26 Jan 2017)
New Revision: 48393

Modified:
   data/CVE/list
Log:
Triage CVE-2016-3071/libreswan

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-26 05:21:12 UTC (rev 48392)
+++ data/CVE/list	2017-01-26 05:21:21 UTC (rev 48393)
@@ -34589,7 +34589,8 @@
 CVE-2016-3072 (Multiple SQL injection vulnerabilities in the scoped_search function ...)
 	NOT-FOR-US: Katello
 CVE-2016-3071 (Libreswan 3.16 might allow remote attackers to cause a denial of ...)
-	- libreswan <unfixed>
+	- libreswan <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://lists.libreswan.org/pipermail/swan-announce/2016/000019.html
 CVE-2016-3070 (The trace_writeback_dirty_page implementation in ...)
 	{DSA-3607-1}
 	- linux 4.4.2-1


