[Secure-testing-commits] r51799 - in data: . CVE

[Ola Lundqvist]

Author: opal
Date: 2017-05-21 18:49:48 +0000 (Sun, 21 May 2017)
New Revision: 51799

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Information from maintainers.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-21 17:34:44 UTC (rev 51798)
+++ data/CVE/list	2017-05-21 18:49:48 UTC (rev 51799)
@@ -23603,13 +23603,13 @@
 	RESERVED
 	- libconfig-model-perl 2.097-2
 	[jessie] - libconfig-model-perl <no-dsa> (Minor issue)
-	[wheezy] - libconfig-model-perl <no-dsa> (Minor issue)
+	[wheezy] - libconfig-model-perl <no-dsa> (Minor issue. Perl itself has to fix this and this can not be done easily)
 	NOTE: https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573
 CVE-2017-0373
 	RESERVED
 	- libconfig-model-perl 2.097-2
 	[jessie] - libconfig-model-perl <no-dsa> (Minor issue)
-	[wheezy] - libconfig-model-perl <no-dsa> (Minor issue)
+	[wheezy] - libconfig-model-perl <not-affected> (Vulnerable code do not exist)
 	NOTE: https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773
 CVE-2017-0372
 	RESERVED

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-05-21 17:34:44 UTC (rev 51798)
+++ data/dla-needed.txt	2017-05-21 18:49:48 UTC (rev 51799)
@@ -65,6 +65,7 @@
 --
 lzo2
   NOTE: 20170520, no patch available yet
+  NOTE: Maintainer has told us to go ahead and fix it.
 --
 mcollective
   NOTE: See https://lists.debian.org/debian-lts/2017/03/msg00008.html