[Secure-testing-commits] r52877 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Sat Jun 24 18:52:07 UTC 2017
Author: carnil
Date: 2017-06-24 18:52:07 +0000 (Sat, 24 Jun 2017)
New Revision: 52877
Modified:
data/CVE/list
Log:
Add references for CVE-2017-9527/mruby
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-06-24 14:22:38 UTC (rev 52876)
+++ data/CVE/list 2017-06-24 18:52:07 UTC (rev 52877)
@@ -2069,6 +2069,8 @@
- mruby <unfixed> (low)
[stretch] - mruby <no-dsa> (Minor issue)
[jessie] - mruby <no-dsa> (Minor issue)
+ NOTE: https://github.com/mruby/mruby/issues/3486
+ NOTE: Fixed by: https://github.com/mruby/mruby/commit/5c114c91d4ff31859fcd84cf8bf349b737b90d99
CVE-2017-9526 (In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key ...)
{DSA-3880-1}
- libgcrypt20 1.7.6-2
More information about the Secure-testing-commits
mailing list