[Secure-testing-commits] r57738 - data/CVE

Chris Lamb lamby at moszumanska.debian.org
Fri Nov 17 19:12:25 UTC 2017


Author: lamby
Date: 2017-11-17 19:12:25 +0000 (Fri, 17 Nov 2017)
New Revision: 57738

Modified:
   data/CVE/list
Log:
CVE-2017-8807/varnish also not vulnerable in wheezy.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-17 19:09:53 UTC (rev 57737)
+++ data/CVE/list	2017-11-17 19:12:25 UTC (rev 57738)
@@ -23606,6 +23606,7 @@
 CVE-2017-8807 (vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache ...)
 	{DSA-4034-1}
 	- varnish <unfixed> (bug #881808)
+	[wheezy] - varnish <not-affected> (Vulnerable code not present, issue introduced in 4.1.0)
 	[jessie] - varnish <not-affected> (Vulnerable code not present, issue introduced in 4.1.0)
 	NOTE: http://varnish-cache.org/security/VSV00002.html
 	NOTE: https://github.com/varnishcache/varnish-cache/pull/2429




More information about the Secure-testing-commits mailing list