Skip to content
Commits on Source (2)
......@@ -58905,6 +58905,7 @@ CVE-2017-3144 [dhcp: omapi code doesn't free socket descriptors when empty messa
- isc-dhcp <unfixed> (bug #887413)
[stretch] - isc-dhcp <no-dsa> (Minor issue)
[jessie] - isc-dhcp <no-dsa> (Minor issue)
[wheezy] - isc-dhcp <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1522918
NOTE: https://source.isc.org/cgi-bin/gitweb.cgi?p=dhcp.git;a=commit;h=1a6b62fe17a42b00fa234d06b6dfde3d03451894
CVE-2017-3143 [An error in TSIG authentication can permit unauthorized dynamic updates]
......@@ -20,8 +20,6 @@ icu
--
irssi (Emilio Pozuelo)
--
isc-dhcp (Thorsten Alteholz)
--
lame (Hugo Lefeuvre)
NOTE: Couldn't reproduce CVE-2017-{69-72}, but successfully reproduced CVE-2017-150{18,45,46}
NOTE: 20180125: Fabian showed interest in porting lame to libsndfile and submitted a patch draft for Jessie.
......