[Secure-testing-commits] r51547 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu May 11 19:02:24 UTC 2017


Author: carnil
Date: 2017-05-11 19:02:24 +0000 (Thu, 11 May 2017)
New Revision: 51547

Modified:
   data/CVE/list
Log:
CVE-2017-7478/openvpn not affecting jessie and older

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-11 18:58:45 UTC (rev 51546)
+++ data/CVE/list	2017-05-11 19:02:24 UTC (rev 51547)
@@ -3747,6 +3747,8 @@
 CVE-2017-7478 [Don't assert out on receiving too-large control packets]
 	RESERVED
 	- openvpn 2.4.0-5
+	[jessie] - openvpn <not-affected> (Vulnerable code introduced later)
+	[wheezy] - openvpn <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/5774cf4c25e1d8bf4e544702db8f157f111c9d93 (master)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/66b99a0753352c5cc43e11e39835b6423112df98 (2.4.x)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/feb35ee5cac605edddd6e9dc62941e2c53f96fb3 (2.3.x)




More information about the Secure-testing-commits mailing list