[Secure-testing-commits] r58146 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-30 15:53:22 +0000 (Thu, 30 Nov 2017)
New Revision: 58146

Modified:
   data/CVE/list
Log:
curl issues fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-30 14:39:30 UTC (rev 58145)
+++ data/CVE/list	2017-11-30 15:53:22 UTC (rev 58146)
@@ -25682,7 +25682,7 @@
 CVE-2017-8819
 	RESERVED
 CVE-2017-8818 (curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to ...)
-	- curl <unfixed>
+	- curl 7.57.0-1
 	[stretch] - curl <not-affected> (Vulnerable code not present)
 	[jessie] - curl <not-affected> (Vulnerable code not present)
 	[wheezy] - curl <not-affected> (Vulnerable code not present)
@@ -25690,12 +25690,12 @@
 	NOTE: https://curl.haxx.se/CVE-2017-8818.patch
 CVE-2017-8817 (The FTP wildcard function in curl and libcurl before 7.57.0 allows ...)
 	{DSA-4051-1}
-	- curl <unfixed>
+	- curl 7.57.0-1
 	NOTE: https://curl.haxx.se/docs/adv_2017-ae72.html
 	NOTE: https://curl.haxx.se/CVE-2017-8817.patch
 CVE-2017-8816 (The NTLM authentication feature in curl and libcurl before 7.57.0 on ...)
 	{DSA-4051-1}
-	- curl <unfixed>
+	- curl 7.57.0-1
 	[wheezy] - curl <not-affected> (Vulnerable code not present, introduced in 7.36.0)
 	NOTE: https://curl.haxx.se/docs/adv_2017-11e7.html
 	NOTE: https://curl.haxx.se/CVE-2017-8816.patch