[Secure-testing-commits] r11306 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2009-03-02 02:22:29 +0000 (Mon, 02 Mar 2009)
New Revision: 11306

Modified:
   data/CVE/list
Log:
new openssl issue, probably minor, asked maintainers via bugreport

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-02 02:17:18 UTC (rev 11305)
+++ data/CVE/list	2009-03-02 02:22:29 UTC (rev 11306)
@@ -192,7 +192,7 @@
 	- tor <unfixed> (unimportant)
 	NOTE: attacker already controls entry and exit node at this stage
 CVE-2009-0653 (OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an ...)
-	TODO: check
+	- openssl <unfixed> (bug #517791)
 CVE-2009-0652 (Mozilla Firefox 3.0.6 does not properly prevent the literal rendering ...)
 	TODO: check
 CVE-2009-0651 (Unspecified vulnerability in the Veritas network daemon (aka vnetd) in ...)