[Secure-testing-commits] r10457 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-22 14:23:17 +0000 (Sat, 22 Nov 2008)
New Revision: 10457

Modified:
   data/CVE/list
Log:
gnutls13 affected by CVE-2008-4989, thanks nutmeg

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-22 11:23:06 UTC (rev 10456)
+++ data/CVE/list	2008-11-22 14:23:17 UTC (rev 10457)
@@ -468,6 +468,8 @@
 	RESERVED
 CVE-2008-4989 (The _gnutls_x509_verify_certificate function in lib/x509/verify.c in ...)
 	- gnutls26 2.4.2-3
+	- gnutls13 <removed>
+	[etch] - gnutls1.3 <unfixed>
 CVE-2008-4963 (Unspecified vulnerability in the VLAN Trunking Protocol (VTP) ...)
 	NOT-FOR-US: Cisco IOS and CatOS
 CVE-2008-4962