[Secure-testing-commits] r6316 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-15 16:01:04 +0000 (Wed, 15 Aug 2007)
New Revision: 6316

Modified:
   data/CVE/list
Log:
informed openssl maintainer about CVE-2007-3108

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-15 15:34:49 UTC (rev 6315)
+++ data/CVE/list	2007-08-15 16:01:04 UTC (rev 6316)
@@ -2814,7 +2814,7 @@
 CVE-2007-3109 (The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage ...)
 	NOT-FOR-US: Microsoft FrontPage
 CVE-2007-3108 (The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL ...)
-	- openssl <unfixed> (low)
+	- openssl <unfixed> (bug: #438142; low)
 CVE-2007-3107 (The signal handling in the Linux kernel 2.6.2 and later, when run on ...)
 	- linux-2.6 <unfixed> (unimportant)
 	NOTE: Not reproducibly reliably by an attacker, mostly a bug