[Secure-testing-commits] r10897 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-01-08 20:23:43 +0000 (Thu, 08 Jan 2009)
New Revision: 10897

Modified:
   data/CVE/list
Log:
openssh no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-08 20:22:04 UTC (rev 10896)
+++ data/CVE/list	2009-01-08 20:23:43 UTC (rev 10897)
@@ -1715,9 +1715,8 @@
 	[lenny] - kfreebsd-7 <no-dsa> (KFreebsd not supported)
 CVE-2008-5161 (Error handling in the SSH protocol in (1) SSH Tectia Client and Server ...)
 	- openssh <unfixed> (low; bug #506115)
-	[etch] - openssh <no-dsa> (minor issue)
-	NOTE: difficult to exploit
-	NOTE: see http://www.openssh.org/txt/cbc.adv
+	[etch] - openssh <no-dsa> (Minor issue, see http://www.openssh.org/txt/cbc.adv)
+	[lenny] - openssh <no-dsa> (Minor issue, see http://www.openssh.org/txt/cbc.adv)
 CVE-2008-5185 (The highlighting functionality in geshi.php in GeSHi before 1.0.8 ...)
 	{DTSA-179-1}
 	- geshi 1.0.8.1-1 (medium)