[Secure-testing-commits] r24871 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2013-12-22 20:31:01 +0000 (Sun, 22 Dec 2013)
New Revision: 24871

Modified:
   data/CVE/list
Log:
openssl fixes


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-22 20:05:59 UTC (rev 24870)
+++ data/CVE/list	2013-12-22 20:31:01 UTC (rev 24871)
@@ -2654,7 +2654,7 @@
 	RESERVED
 CVE-2013-6449 [crash when using TLS 1.2]
 	RESERVED
-	- openssl <unfixed> (bug #732754)
+	- openssl 1.0.1e-5 (bug #732754)
 	[squeeze] - openssl <not-affected> (TLS 1.2 support introduced in 1.0.1)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1045363
 	NOTE: http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ca98926
@@ -23845,7 +23845,7 @@
 	- lighttpd 1.4.30-1 (bug #700399)
 	- nginx 1.2.1-2.2 (bug #700426)
 	[squeeze] - qt4-x11 <no-dsa> (Minor issue)
-	- openssl <unfixed> (low; bug #728055)
+	- openssl 1.0.1e-5 (low; bug #728055)
 	[wheezy] - openssl <no-dsa> (Minor issue)
 	[squeeze] - openssl <no-dsa> (Minor issue)
 	NOTE: openssl redhat announcement https://rhn.redhat.com/errata/RHSA-2013-0587.html