[Secure-testing-commits] r22289 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-05-17 05:54:57 +0000 (Fri, 17 May 2013)
New Revision: 22289

Modified:
   data/CVE/list
Log:
bouncycastle fixing ##699885, CVE-2013-1624 and CVE-2013-0169 uploaded as 1.48+dfsg-2 to unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-16 21:16:25 UTC (rev 22288)
+++ data/CVE/list	2013-05-17 05:54:57 UTC (rev 22289)
@@ -4623,10 +4623,9 @@
 CVE-2013-1625
 	RESERVED
 CVE-2013-1624 (The TLS implementation in the Bouncy Castle Java library before 1.48 ...)
-	- bouncycastle <unfixed> (low; bug #699885)
+	- bouncycastle 1.48+dfsg-2 (low; bug #699885)
 	[squeeze] - bouncycastle <no-dsa> (Minor issue)
 	[wheezy] - bouncycastle <no-dsa> (Minor issue)
-	NOTE: Fixed in experimental in 1.48+dfsg-1
 CVE-2013-1623 (The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not ...)
 	- mysql-5.1 <removed>
 	- mysql-5.5 5.5.30+dfsg-1.1 (bug #699886)
@@ -8535,7 +8534,7 @@
 CVE-2013-0169 (The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as ...)
 	{DSA-2622-1 DSA-2621-1}
 	- openssl 1.0.1e-1 (bug #699889)
-	- bouncycastle <unfixed> (low; bug #699885)
+	- bouncycastle 1.48+dfsg-2 (low; bug #699885)
 	[wheezy] - bouncycastle <no-dsa> (Minor issue)
 	[squeeze] - bouncycastle <no-dsa> (Minor issue)
 	- mysql-5.1 <removed>