[Secure-testing-commits] r56194 - in data: . CVE

[Emilio Pozuelo Monfort]

Author: pochu
Date: 2017-09-27 17:06:45 +0000 (Wed, 27 Sep 2017)
New Revision: 56194

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
trafficserver n/a on wheezy, see source code and

https://lists.debian.org/debian-lts/2017/09/msg00078.html


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-27 16:57:16 UTC (rev 56193)
+++ data/CVE/list	2017-09-27 17:06:45 UTC (rev 56194)
@@ -82713,6 +82713,7 @@
 	NOT-FOR-US: Apache Cordova
 CVE-2015-5206 (Unspecified vulnerability in the HTTP/2 experimental feature in Apache ...)
 	- trafficserver 6.0.0-1
+	[wheezy] - trafficserver <not-affected> (Vulnerable code not present)
 CVE-2015-5205
 	RESERVED
 CVE-2015-5204 (CRLF injection vulnerability in the Apache Cordova File Transfer ...)
@@ -82842,6 +82843,7 @@
 	- libstruts1.2-java <not-affected> (Affects 2.0.0 - 2.3.16.3)
 CVE-2015-5168 (Unspecified vulnerability in the HTTP/2 experimental feature in Apache ...)
 	- trafficserver 6.0.0-1
+	[wheezy] - trafficserver <not-affected> (Vulnerable code not present)
 CVE-2015-5167 (The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote ...)
 	NOT-FOR-US: Apache Ranger
 CVE-2015-5166 (Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not ...)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-09-27 16:57:16 UTC (rev 56193)
+++ data/dla-needed.txt	2017-09-27 17:06:45 UTC (rev 56194)
@@ -148,8 +148,6 @@
 --
 tiff3
 --
-trafficserver
---
 wireshark
   NOTE: 2017-08-28: Contacted maintainer since most NOTE: issues affect
   Jessie/Stretch as well