[Secure-testing-commits] r56197 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Sep 27 18:26:59 UTC 2017


Author: carnil
Date: 2017-09-27 18:26:59 +0000 (Wed, 27 Sep 2017)
New Revision: 56197

Modified:
   data/CVE/list
Log:
CVE-2017-12424/shadow fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-27 17:15:47 UTC (rev 56196)
+++ data/CVE/list	2017-09-27 18:26:59 UTC (rev 56197)
@@ -6676,7 +6676,7 @@
 	NOTE: The CVE is for the issue when importing a project via crafted SSH URLs,
 	NOTE: which becomes ineffective with a fixed git version itself.
 CVE-2017-12424 (In shadow before 4.5, the newusers tool could be made to manipulate ...)
-	- shadow <unfixed> (bug #756630)
+	- shadow 1:4.5-1 (bug #756630)
 	[stretch] - shadow <no-dsa> (Minor issue)
 	[jessie] - shadow <no-dsa> (Minor issue)
 	[wheezy] - shadow <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list