[Secure-testing-commits] r30604 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-12-09 05:32:54 +0000 (Tue, 09 Dec 2014)
New Revision: 30604

Modified:
   data/CVE/list
Log:
haskell-tls no-dsa
new unbound issue
bind n/a


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-08 21:14:23 UTC (rev 30603)
+++ data/CVE/list	2014-12-09 05:32:54 UTC (rev 30604)
@@ -2163,7 +2163,7 @@
 	NOT-FOR-US: Go Git Service
 CVE-2014-8680 [Defects in GeoIP features can cause BIND to crash]
 	RESERVED
-	- bind9 <unfixed>
+	- bind9 <not-affected> (Only affects 9.10 to 9.11)
 	NOTE: https://kb.isc.org/article/AA-01217/0
 CVE-2014-8679
 	RESERVED
@@ -2311,6 +2311,8 @@
 	RESERVED
 CVE-2014-8602
 	RESERVED
+	- unbound <unfixed>
+	NOTE: http://www.unbound.net/pipermail/unbound-users/2014-December/003662.html
 CVE-2014-8601
 	RESERVED
 	- pdns-recursor 3.6.2-1
@@ -43964,6 +43966,8 @@
 	- gnutls28 3.0.22-3
 	- cyassl 2.9.4+dfsg-1
 	- haskell-tls <unfixed>
+	[wheezy] - haskell-tls <no-dsa> (Minor issue)
+	[jessie] - haskell-tls <no-dsa> (Minor issue)
 	- matrixssl <removed> (low)
 	[squeeze] - matrixssl <no-dsa> (Minor issue)
 	[wheezy] - matrixssl <no-dsa> (Minor issue)