[Secure-testing-commits] r56956 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-25 07:32:10 +0000 (Wed, 25 Oct 2017)
New Revision: 56956

Modified:
   data/CVE/list
Log:
new busybox issues
openvpn fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-25 07:23:56 UTC (rev 56955)
+++ data/CVE/list	2017-10-25 07:32:10 UTC (rev 56956)
@@ -1,7 +1,11 @@
 CVE-2017-15874 (archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an ...)
-	TODO: check
+	- busybox <unfixed> (bug #879732)
+	[stretch] - busybox <no-dsa> (Minor issue)
+	[jessie] - busybox <no-dsa> (Minor issue)
 CVE-2017-15873 (The get_next_block function in archival/libarchive/decompress_bunzip2.c ...)
-	TODO: check
+	- busybox <unfixed> (bug #879732)
+	[stretch] - busybox <no-dsa> (Minor issue)
+	[jessie] - busybox <no-dsa> (Minor issue)
 CVE-2017-15872 (phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and ...)
 	NOT-FOR-US: phpwcms
 CVE-2017-15871 (** DISPUTED ** The deserialize function in serialize-to-js through ...)
@@ -10248,7 +10252,7 @@
 	RESERVED
 	NOT-FOR-US: Red Hat JBoss EAP
 CVE-2017-12166 (OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to ...)
-	- openvpn <unfixed> (bug #877089)
+	- openvpn 2.4.4-1 (bug #877089)
 	[stretch] - openvpn <no-dsa> (Minor issue)
 	[jessie] - openvpn <no-dsa> (Minor issue)
 	[wheezy] - openvpn <no-dsa> (Minor issue)