[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2016-995{2, 3}/curl

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c4ff735e by Salvatore Bonaccorso at 2018-03-13T21:58:08+01:00
Add CVE-2016-995{2,3}/curl

Mark them as not-affected since the issues are specific to Windows CE
builds.

  https://curl.haxx.se/docs/adv_20161221B.html
  https://curl.haxx.se/docs/adv_20161221C.html

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -62937,9 +62937,11 @@ CVE-2016-9954 (The backtrack compilation code in the Irregex package (aka IrRegu
 	NOTE: https://github.com/ashinn/irregex/commit/a16ffc86eca15fca9e40607d41de3cea9cf868f1
 	NOTE: For chicken vulnerable code in ./irregex-core.scm
 CVE-2016-9953 (The verify_certificate function in lib/vtls/schannel.c in libcurl ...)
-	TODO: check
+	- curl <not-affected> (Windows CE specific issue)
+	NOTE: https://curl.haxx.se/docs/adv_20161221C.html
 CVE-2016-9952 (The verify_certificate function in lib/vtls/schannel.c in libcurl ...)
-	TODO: check
+	- curl <not-affected> (Windows CE specific issue)
+	NOTE: https://curl.haxx.se/docs/adv_20161221B.html
 CVE-2016-10008 (SQL injection vulnerability in the "Content Types > Content Types" ...)
 	NOT-FOR-US: dotCMS
 CVE-2016-10007 (SQL injection vulnerability in the "Marketing > Forms" screen in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c4ff735edf983b0412355e4b4fa0dbaad4fc5de0

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c4ff735edf983b0412355e4b4fa0dbaad4fc5de0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180313/60f65104/attachment.html>