[Secure-testing-commits] r58072 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-28 05:25:18 +0000 (Tue, 28 Nov 2017)
New Revision: 58072

Modified:
   data/CVE/list
Log:
CVE-2017-15093 and CVE-2017-15091 do not affect wheezy version, API code introduced later

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-28 05:24:54 UTC (rev 58071)
+++ data/CVE/list	2017-11-28 05:25:18 UTC (rev 58072)
@@ -6320,7 +6320,7 @@
 	- pdns-recursor 4.0.7-1
 	[stretch] - pdns-recursor <no-dsa> (Minor issue)
 	[jessie] - pdns-recursor <no-dsa> (Minor issue)
-	[wheezy] - pdns-recursor <no-dsa> (Minor issue)
+	[wheezy] - pdns-recursor <not-affected> (Vulnerable code introduced later)
 	NOTE: https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html
 	NOTE: https://downloads.powerdns.com/patches/2017-06/
 CVE-2017-15092 [Cross-Site Scripting in the web interface]
@@ -6336,7 +6336,7 @@
 	- pdns <unfixed>
 	[stretch] - pdns <no-dsa> (Minor issue)
 	[jessie] - pdns <no-dsa> (Minor issue)
-	[wheezy] - pdns <no-dsa> (Minor issue)
+	[wheezy] - pdns <not-affected> (Vulnerable code not present)
 	NOTE: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2017-04.html
 	NOTE: https://downloads.powerdns.com/patches/2017-04/
 CVE-2017-15090 [Insufficient validation of DNSSEC signatures]