[Secure-testing-commits] r58064 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Mon Nov 27 21:27:29 UTC 2017
Author: carnil
Date: 2017-11-27 21:27:29 +0000 (Mon, 27 Nov 2017)
New Revision: 58064
Modified:
data/CVE/list
Log:
Record fixed version for pdns-recursor upload to unstable
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-11-27 21:25:56 UTC (rev 58063)
+++ data/CVE/list 2017-11-27 21:27:29 UTC (rev 58064)
@@ -6309,7 +6309,7 @@
NOTE: Details: http://www.openwall.com/lists/oss-security/2017/11/02/3
CVE-2017-15094 [Memory leak in DNSSEC parsing]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.0.7-1
[stretch] - pdns-recursor <no-dsa> (Minor issue)
[jessie] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
[wheezy] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
@@ -6317,14 +6317,14 @@
NOTE: https://downloads.powerdns.com/patches/2017-07/
CVE-2017-15093 [Configuration file injection in the API]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.0.7-1
[stretch] - pdns-recursor <no-dsa> (Minor issue)
[jessie] - pdns-recursor <no-dsa> (Minor issue)
NOTE: https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html
NOTE: https://downloads.powerdns.com/patches/2017-06/
CVE-2017-15092 [Cross-Site Scripting in the web interface]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.0.7-1
[stretch] - pdns-recursor <no-dsa> (Minor issue)
[jessie] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
[wheezy] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
@@ -6339,7 +6339,7 @@
NOTE: https://downloads.powerdns.com/patches/2017-04/
CVE-2017-15090 [Insufficient validation of DNSSEC signatures]
RESERVED
- - pdns-recursor <unfixed>
+ - pdns-recursor 4.0.7-1
[stretch] - pdns-recursor <no-dsa> (Minor issue)
[jessie] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
[wheezy] - pdns-recursor <not-affected> (Issue introduced in 4.0.0)
More information about the Secure-testing-commits
mailing list