[Secure-testing-commits] r53364 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-10 21:16:04 +0000 (Mon, 10 Jul 2017)
New Revision: 53364

Modified:
   data/CVE/list
Log:
hexchat, 389 no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-10 21:10:14 UTC (rev 53363)
+++ data/CVE/list	2017-07-10 21:16:04 UTC (rev 53364)
@@ -43981,6 +43981,8 @@
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=19257
 CVE-2016-5416 (389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, ...)
 	- 389-ds-base <unfixed> (bug #834233)
+	[stretch] - 389-ds-base <no-dsa> (Minor issue)
+	[jessie] - 389-ds-base <no-dsa> (Minor issue)
 	NOTE: https://fedorahosted.org/389/ticket/48852
 	NOTE: Potentially related: https://fedorahosted.org/389/ticket/48354
 CVE-2016-5415
@@ -54337,7 +54339,8 @@
 CVE-2016-2234
 	RESERVED
 CVE-2016-2233 (Stack-based buffer overflow in the inbound_cap_ls function in ...)
-	- hexchat 2.12.0-1
+	- hexchat <unfixed> (low)
+	[stretch] - hexchat <no-dsa> (Minor issue, requires connection to a malicious server)
 	[jessie] - hexchat <no-dsa> (Minor issue, requires connection to a malicious server)
 	NOTE: https://www.exploit-db.com/exploits/39657/
 	NOTE: https://github.com/hexchat/hexchat/issues/1934