[Secure-testing-commits] r31033 - in data: . CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Dec 30 00:09:32 UTC 2014


Author: jmm
Date: 2014-12-30 00:09:31 +0000 (Tue, 30 Dec 2014)
New Revision: 31033

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
take polarssl


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-29 23:50:51 UTC (rev 31032)
+++ data/CVE/list	2014-12-30 00:09:31 UTC (rev 31033)
@@ -15404,6 +15404,7 @@
 	[jessie] - openjdk-7 <no-dsa> (Upstream doesn't plan to disable SSLv3, stick with that)
 	- openjdk-8 <unfixed>
 	- polarssl 1.3.9-2
+	[wheezy] - polarssl <no-dsa> (Minor issue)
 	- surf <unfixed> (unimportant)
 	- tlslite <removed>
 	[wheezy] - tlslite <no-dsa> (Minor issue)

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2014-12-29 23:50:51 UTC (rev 31032)
+++ data/dsa-needed.txt	2014-12-30 00:09:31 UTC (rev 31033)
@@ -39,7 +39,7 @@
   NOTE: regression fix needed for CVE-2013-2053 (#743332) and CVE-2013-6466
   (#744717)
 --
-polarssl
+polarssl (jmm)
 --
 ruby1.9.1
   (no-dsa issues CVE-2013-2065 and CVE-2014-4975 could be fixed along)




More information about the Secure-testing-commits mailing list