[Secure-testing-commits] r15712 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-12-16 16:53:35 +0000 (Thu, 16 Dec 2010)
New Revision: 15712

Modified:
   data/CVE/list
Log:
openssh doesn't use j-pake


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-12-15 22:25:15 UTC (rev 15711)
+++ data/CVE/list	2010-12-16 16:53:35 UTC (rev 15712)
@@ -270,8 +270,7 @@
 	[lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e)
 	NOTE: Fixed in 019f1955194360600ecf0644959ceca6734c2d7b
 CVE-2010-4478 (OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly ...)
-	- openssh <unfixed> (bug #606922)
-	[lenny] - openssh <not-affected> (doesn't include J-PAKE)
+	- openssh <not-affected> (J-PAKE not activated, see bug #606922)
 CVE-2010-4477
 	RESERVED
 CVE-2010-4476