Author: carnil
Date: 2015-08-26 05:00:42 +0000 (Wed, 26 Aug 2015)
New Revision: 36305

Modified:
   data/CVE/list
   data/DLA/list
   data/DSA/list
Log:
CVEs assigned for insircd issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2015-08-25 21:10:11 UTC (rev 36304)
+++ data/CVE/list       2015-08-26 05:00:42 UTC (rev 36305)
@@ -11454,22 +11454,18 @@
        [jessie] - dokuwiki <no-dsa> (Minor issue)
        [wheezy] - dokuwiki <no-dsa> (Minor issue)
        [squeeze] - dokuwiki <no-dsa> (Minor issue)
-CVE-2015-XXXX [Incorrect fix for CVE-2012-1836]
+CVE-2015-6674 [problem of "i =- 12" where "i -= 12" was intended]
        - inspircd 2.0.16-1 (bug #780880)
-       [wheezy] - inspircd 2.0.5-1+deb7u1
-       [squeeze] - inspircd 1.1.22+dfsg-4+squeeze2
-       NOTE: wheezy-tagged entry as temporary workaround until CVE assigned 
for issue solved in DSA-3226-1
-       NOTE: squeeze-tagged entry as temporary workaround until CVE assigned 
for issue solved in DLA-276-1
        NOTE: Correct fix: 
https://github.com/inspircd/inspircd/commit/ed28c1ba666b39581adb860bf51cdde43c84cc89
-       NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2015/03/29/5
-CVE-2014-XXXX [infinite loop cauesd by invalid dns packets]
+       NOTE: http://www.openwall.com/lists/oss-security/2015/03/29/5
+CVE-2012-6696 [mishandling of unsigned values]
        - inspircd 2.0.16-1 (bug #780880)
-       [wheezy] - inspircd 2.0.5-1+deb7u1
-       [squeeze] - inspircd 1.1.22+dfsg-4+squeeze2
-       NOTE: wheezy-tagged entry as temporary workaround until CVE assigned 
for issue solved in DSA-3226-1
-       NOTE: squeeze-tagged entry as temporary workaround until CVE assigned 
for issue solved in DLA-276-1
+       NOTE: Correct fix: 
https://github.com/inspircd/inspircd/commit/ed28c1ba666b39581adb860bf51cdde43c84cc89
+       NOTE: http://www.openwall.com/lists/oss-security/2015/03/29/5
+CVE-2012-6697 [infinite loop cauesd by invalid dns packets]
+       - inspircd 2.0.16-1 (bug #780880)
        NOTE: 
https://github.com/inspircd/inspircd/commit/58c893e834ff20495d007709220881a3ff13f423
-       NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2015/03/29/5
+       NOTE: http://www.openwall.com/lists/oss-security/2015/03/29/5
 CVE-2015-2788 (Multiple stack-based buffer overflows in the ib_fill_isqlda 
function ...)
        {DSA-3219-1}
        - libdbd-firebird-perl 1.18-2 (bug #780925)

Modified: data/DLA/list
===================================================================
--- data/DLA/list       2015-08-25 21:10:11 UTC (rev 36304)
+++ data/DLA/list       2015-08-26 05:00:42 UTC (rev 36305)
@@ -69,6 +69,7 @@
        {CVE-2015-2059}
        [squeeze] - libidn 1.15-2+deb6u1
 [18 Jul 2015] DLA-276-1 inspircd - security update
+       {CVE-2012-6696 CVE-2012-6697 CVE-2015-6674}
        [squeeze] - inspircd 1.1.22+dfsg-4+squeeze2
 [18 Jul 2015] DLA-275-1 ruby1.9.1 - security update
        {CVE-2014-6438}

Modified: data/DSA/list
===================================================================
--- data/DSA/list       2015-08-25 21:10:11 UTC (rev 36304)
+++ data/DSA/list       2015-08-26 05:00:42 UTC (rev 36305)
@@ -427,6 +427,7 @@
        {CVE-2015-0845}
        [wheezy] - movabletype-opensource 5.1.4+dfsg-4+deb7u3
 [15 Apr 2015] DSA-3226-1 inspircd - security update
+       {CVE-2012-6696 CVE-2012-6697 CVE-2015-6674}
        [wheezy] - inspircd 2.0.5-1+deb7u1
 [15 Apr 2015] DSA-3225-1 gst-plugins-bad0.10 - security update
        {CVE-2015-0797}


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to