[Secure-testing-commits] r51577 - data/CVE

Fri May 12 13:33:13 UTC 2017

Author: hertzog
Date: 2017-05-12 13:33:13 +0000 (Fri, 12 May 2017)
New Revision: 51577

Modified:
   data/CVE/list
Log:
Add patch for CVE-2017-7479 for openvpn 2.2.x (wheezy)

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-05-12 13:33:03 UTC (rev 51576)
+++ data/CVE/list	2017-05-12 13:33:13 UTC (rev 51577)
@@ -3791,6 +3791,7 @@
 	NOTE: https://github.com/OpenVPN/openvpn/commit/e498cb0ea8d3a451b39eaf6f9b6a7488f18250b8 (master)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/591a4e574c43cb9e820950f15dcaabda261def78 (2.4.x)
 	NOTE: https://github.com/OpenVPN/openvpn/commit/b727643cdf4e078f132a90e1c474a879a5760578 (2.3.x)
+	NOTE: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14643.html (3 patches for 2.2.x)
 	NOTE: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
 CVE-2017-7478 [Don't assert out on receiving too-large control packets]
 	RESERVED


