[Secure-testing-commits] r52954 - in data: . CVE

Antoine Beaupré anarcat at moszumanska.debian.org
Tue Jun 27 18:16:58 UTC 2017


Author: anarcat
Date: 2017-06-27 18:16:58 +0000 (Tue, 27 Jun 2017)
New Revision: 52954

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
mark TS as N/A in wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-27 18:02:28 UTC (rev 52953)
+++ data/CVE/list	2017-06-27 18:16:58 UTC (rev 52954)
@@ -14024,6 +14024,7 @@
 	RESERVED
 CVE-2017-5659 (Apache Traffic Server before 6.2.1 generates a coredump when there is ...)
 	- trafficserver 7.0.0-1
+	[wheezy] - trafficserver <not-affected> (PoC doesn't crash the server, fix too hard to backport)
 	NOTE: https://issues.apache.org/jira/browse/TS-4507
 	NOTE: reproducer in https://issues.apache.org/jira/browse/TS-4819 (dupe of above)
 	NOTE: https://github.com/apache/trafficserver/pull/787/commits/85c021123fd94c4d97a6015484eb1d8054bec9eb

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-06-27 18:02:28 UTC (rev 52953)
+++ data/dla-needed.txt	2017-06-27 18:16:58 UTC (rev 52954)
@@ -117,10 +117,6 @@
   NOTE: this is about https://www.sudo.ws/repos/sudo/raw-rev/15a46f4007dd
   NOTE: which might well be fixed once more issues piled up
 --
-trafficserver
-  NOTE: maintainer contacted 2017-04-26
-  NOTE: reproducer doesn't crash server in a test VM - <not-affected>? --anarcat
---
 wireshark
   NOTE: maintainer *may* take care of this, as previously
 --




More information about the Secure-testing-commits mailing list