Author: hertzog Date: 2015-12-16 22:08:49 +0000 (Wed, 16 Dec 2015) New Revision: 38372
Modified: data/CVE/list data/dla-needed.txt Log: Reclassify CVE-2015-8538/squeeze as not-affected See https://lists.debian.org/20151215191827.GB13041@taz.looney Modified: data/CVE/list =================================================================== --- data/CVE/list 2015-12-16 21:47:24 UTC (rev 38371) +++ data/CVE/list 2015-12-16 22:08:49 UTC (rev 38372) @@ -1162,6 +1162,7 @@ - dwarfutils <unfixed> (bug #807817) [jessie] - dwarfutils <no-dsa> (Minor issue) [wheezy] - dwarfutils <no-dsa> (Minor issue) + [squeeze] - dwarfutils <not-affected> (No segfault with provided test case) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1289385 NOTE: http://www.openwall.com/lists/oss-security/2015/12/09/2 NOTE: http://sourceforge.net/p/libdwarf/code/ci/da724a0bc5eec8e9ec0b0cb0c238a80e34466459/ Modified: data/dla-needed.txt =================================================================== --- data/dla-needed.txt 2015-12-16 21:47:24 UTC (rev 38371) +++ data/dla-needed.txt 2015-12-16 22:08:49 UTC (rev 38372) @@ -18,9 +18,6 @@ dbconfig-common NOTE: maintainer should take care of this, cf https://lists.debian.org/565626bf.2010...@debian.org -- -dwarfutils (Troy Heber) - NOTE: exploit does not crash dwarfutils but _dwarf_get_abbrev_for_code lacks the check --- foomatic-filters -- libpng (Thorsten Alteholz) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits