[Secure-testing-commits] r51550 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-05-11 19:06:20 +0000 (Thu, 11 May 2017)
New Revision: 51550

Modified:
   data/CVE/list
Log:
Add audit information for openvpn

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-11 19:06:07 UTC (rev 51549)
+++ data/CVE/list	2017-05-11 19:06:20 UTC (rev 51550)
@@ -3745,6 +3745,7 @@
 	NOTE: https://github.com/OpenVPN/openvpn/commit/e498cb0ea8d3a451b39eaf6f9b6a7488f18250b8 (master)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/591a4e574c43cb9e820950f15dcaabda261def78 (2.4.x)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/b727643cdf4e078f132a90e1c474a879a5760578 (2.3.x)
+	NOTE: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
 CVE-2017-7478 [Don't assert out on receiving too-large control packets]
 	RESERVED
 	- openvpn 2.4.0-5
@@ -3755,6 +3756,7 @@
 	NOTE: https://github.com/OpenVPN/openvpn/commit/feb35ee5cac605edddd6e9dc62941e2c53f96fb3 (2.3.x)
 	NOTE: Introduced in: https://github.com/OpenVPN/openvpn/commit/3c1b19e04745177185decd14da82c71458442b82 (2.4.0)
 	NOTE: Introduced in (backported to 2.3.12): https://github.com/OpenVPN/openvpn/commit/358f513c008bf01fadb82759ac75ffb8613fc785
+	NOTE: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
 CVE-2017-7477 (Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module ...)
 	- linux 4.9.25-1
 	[jessie] - linux <not-affected> (Introduced in 4.6)