[Secure-testing-commits] r6961 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2007-10-14 21:17:50 +0000 (Sun, 14 Oct 2007)
New Revision: 6961

Modified:
   data/CVE/list
Log:
annotate openssl entry more


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-14 21:16:21 UTC (rev 6960)
+++ data/CVE/list	2007-10-14 21:17:50 UTC (rev 6961)
@@ -1018,10 +1018,10 @@
 	NOTE: Gaim not affected, vulnerable code was introduced in 2.2.0
 CVE-2007-4995 [remote code execution in openssl 0.9.8 DTLS]
 	RESERVED
-	- openssl 0.9.8f-1 (medium)
-	- openssl097 <not-affected>
-	- openssl096 <not-affected>
-	[sarge] - openssl <not-affected> (vulnerable code introduced later referring to maintainer)
+	- openssl 0.9.8f-1 (low)
+	- openssl097 <not-affected> (DTLS support was introduced in 0.9.8)
+	- openssl096 <not-affected> (DTLS support was introduced in 0.9.8)
+	[sarge] - openssl <not-affected> (DTLS support was introduced in 0.9.8)
 CVE-2007-4994
 	RESERVED
 CVE-2007-4993 (pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a ...)