[Secure-testing-commits] r52717 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-19 19:35:52 +0000 (Mon, 19 Jun 2017)
New Revision: 52717

Modified:
   data/CVE/list
Log:
Add CVE-2017-7659/apache2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-19 18:44:49 UTC (rev 52716)
+++ data/CVE/list	2017-06-19 19:35:52 UTC (rev 52717)
@@ -6017,8 +6017,13 @@
 	NOT-FOR-US: Apache CXF
 CVE-2017-7660
 	RESERVED
-CVE-2017-7659
+CVE-2017-7659 [mod_http2 null pointer dereference]
 	RESERVED
+	- apache2 <unfixed>
+	[jessie] - apache2 <not-affected> (Vulnerable code not present)
+	[wheezy] - apache2 <not-affected> (Vulnerable code not present)
+	NOTE: HTTP/2 support introduced in 2.4.17
+	NOTE: http://www.openwall.com/lists/oss-security/2017/06/19/5
 CVE-2017-7658
 	RESERVED
 CVE-2017-7657