[Secure-testing-commits] r53894 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Jul 25 10:21:45 UTC 2017


Author: carnil
Date: 2017-07-25 10:21:45 +0000 (Tue, 25 Jul 2017)
New Revision: 53894

Modified:
   data/CVE/list
Log:
Mark krb5 as no-dsa

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-25 10:21:36 UTC (rev 53893)
+++ data/CVE/list	2017-07-25 10:21:45 UTC (rev 53894)
@@ -611,6 +611,8 @@
 CVE-2017-11368 [Invalid S4U2Self or S4U2Proxy request causes assertion failure]
 	RESERVED
 	- krb5 1.15.1-2 (bug #869260)
+	[stretch] - krb5 <no-dsa> (Minor issue; can be fixed along with a future DSA)
+	[jessie] - krb5 <no-dsa> (Minor issue; can be fixed along with a future DSA)
 	NOTE: https://github.com/krb5/krb5/pull/678/commits/a860385dd8fbd239fdb31b347e07f4e6b2fbdcc2
 CVE-2017-11367 (The shoco_decompress function in the API in shoco through 2017-07-17 ...)
 	NOT-FOR-US: shoco




More information about the Secure-testing-commits mailing list