[Secure-testing-commits] r57122 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-29 21:38:17 +0000 (Sun, 29 Oct 2017)
New Revision: 57122

Modified:
   data/CVE/list
Log:
quagga CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-29 21:37:30 UTC (rev 57121)
+++ data/CVE/list	2017-10-29 21:38:17 UTC (rev 57122)
@@ -6,7 +6,9 @@
 	NOTE: This is similar class of issue as for CVE-2017-1000117/git
 	NOTE: But needs a separate CVE since different codebasis.
 CVE-2017-16227 (The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 ...)
-	TODO: check
+	- quagga <unfixed> (bug #879474)
+	NOTE: https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html
+	NOTE: http://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008
 CVE-2017-16226
 	RESERVED
 CVE-2017-16225
@@ -863,10 +865,6 @@
 	RESERVED
 CVE-2014-10064
 	RESERVED
-CVE-2017-XXXX [quagga-bgpd: BGP session termination due to rather long AS paths in update messages]
-	- quagga <unfixed> (bug #879474)
-	NOTE: https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html
-	NOTE: http://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008
 CVE-2017-15994 (rsync 3.1.3-development before 2017-10-24, as used in the xlucas svfs ...)
 	- rsync <unfixed>
 	NOTE: https://git.samba.org/?p=rsync.git;a=commit;h=7b8a4ecd6ff9cdf4e5d3850ebf822f1e989255b3