[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-15107/dnsmasq

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
622fbcad by Salvatore Bonaccorso at 2018-01-23T22:19:46+01:00
Add CVE-2017-15107/dnsmasq

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -21618,7 +21618,9 @@ CVE-2017-15108 (spice-vdagent up to and including 0.17.0 does not properly escap
 	NOTE: Fixed by: https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1510864
 CVE-2017-15107 (A vulnerability was found in the implementation of DNSSEC in Dnsmasq ...)
-	TODO: check
+	- dnsmasq <unfixed>
+	NOTE: http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html
+	NOTE: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=4fe6744a220eddd3f1749b40cac3dfc510787de6
 CVE-2017-15106
 	RESERVED
 CVE-2017-15105 (A flaw was found in the way unbound before 1.6.8 validated ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/622fbcad5ad86f54cd7191ad7a13c91f4ab93198

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/622fbcad5ad86f54cd7191ad7a13c91f4ab93198
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180123/ac637be8/attachment.html>