[Secure-testing-commits] r54003 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-07-27 17:21:07 +0000 (Thu, 27 Jul 2017)
New Revision: 54003

Modified:
   data/CVE/list
Log:
Update entry for CVE-2016-10396/ipsec-tools

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-27 17:08:07 UTC (rev 54002)
+++ data/CVE/list	2017-07-27 17:21:07 UTC (rev 54003)
@@ -2244,10 +2244,11 @@
 CVE-2017-10930
 	RESERVED
 CVE-2016-10396 (The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable ...)
-	- ipsec-tools <unfixed> (bug #867986)
+	- ipsec-tools 1:0.8.2+20140711-9 (bug #867986)
 	NOTE: NetBSD applied patch: http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c.diff?r1=1.5&r2=1.5.36.1
 	NOTE: NetBSD Problem report: https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=51682
-	NOTE: patch disputed, cf. https://bugs.debian.org/867986#19
+	NOTE: Patch disputed, cf. https://bugzilla.novell.com/show_bug.cgi?id=1047443#c1
+	NOTE: Updated patch: https://anonscm.debian.org/cgit/pkg-ipsec-tools/pkg-ipsec-tools.git/plain/debian/patches/CVE-2016-10396.patch?id=62ac12648a4eb7c5ba5dba0f81998d1acf310d8b
 CVE-2017-10929 (The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 ...)
 	{DLA-1016-1}
 	- radare2 <unfixed> (low; bug #867369)