Author: carnil
Date: 2016-11-21 19:41:52 +0000 (Mon, 21 Nov 2016)
New Revision: 46391
Modified:
data/CVE/list
Log:
Update status for CVE-2016-0727
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-11-21 19:40:28 UTC (rev 46390)
+++ data/CVE/list 2016-11-21 19:41:52 UTC (rev 46391)
@@ -28986,11 +28986,12 @@
NOTE:
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
CVE-2016-0727 [NTP statsdir cleanup cronjob insecure]
RESERVED
- - ntp 1:4.2.8p8+dfsg-1.1 (low; bug #839998)
+ - ntp 1:4.2.8p9+dfsg-2 (low; bug #839998)
[jessie] - ntp <no-dsa> (Minor issue)
[wheezy] - ntp <no-dsa> (Minor issue)
NOTE: https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050
NOTE:
http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/
+ NOTE: Originally addressed in 1:4.2.8p8+dfsg-1.1, then refixed in
1:4.2.8p9+dfsg-2
CVE-2016-0726
RESERVED
- nagios3 <not-affected> (Specific to Fedora installation)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
