[Git][security-tracker-team/security-tracker][master] Update status for CVE-2016-4864/h2o

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3eabf010 by Salvatore Bonaccorso at 2018-07-29T04:07:32Z
Update status for CVE-2016-4864/h2o

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -106872,7 +106872,8 @@ CVE-2016-4866 (Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4
 CVE-2016-4865 (Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 ...)
 	NOT-FOR-US: Cybozu
 CVE-2016-4864 (H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows ...)
-	NOT-FOR-US: H2O
+	- h2o <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://github.com/h2o/h2o/issues/1077
 CVE-2016-4863 (The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware ...)
 	NOT-FOR-US: Toshiba FlashAir
 CVE-2016-4862 (Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3eabf010af2730bf6b632c7cbfb5dd818692b44c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3eabf010af2730bf6b632c7cbfb5dd818692b44c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180729/4911cab3/attachment.html>