[Secure-testing-commits] r48400 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-26 05:33:11 +0000 (Thu, 26 Jan 2017)
New Revision: 48400

Modified:
   data/CVE/list
Log:
Triage CVE-2013-4564/libreswan

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-26 05:31:26 UTC (rev 48399)
+++ data/CVE/list	2017-01-26 05:33:11 UTC (rev 48400)
@@ -102717,7 +102717,9 @@
 	[wheezy] - xlhtml <no-dsa> (Minor issue)
 	[squeeze] - xlhtml <no-dsa> (Minor issue)
 CVE-2013-4564 (Libreswan 3.6 allows remote attackers to cause a denial of service ...)
-	- libreswan <unfixed>
+	- libreswan <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://libreswan.org/security/CVE-2013-4564/CVE-2013-4564.txt.asc
+	NOTE: https://github.com/libreswan/libreswan/commit/9b31deafbdbf0c2206358dfbf2d4e343e365f23f
 CVE-2013-4563 (The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux ...)
 	- linux-2.6 <not-affected> (Introduced in v3.10-rc5)
 	- linux 3.11.10-1