[Secure-testing-commits] r25896 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-02-26 16:05:35 +0000 (Wed, 26 Feb 2014)
New Revision: 25896

Modified:
   data/CVE/list
Log:
Update entry for gnutls26 issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-26 07:32:23 UTC (rev 25895)
+++ data/CVE/list	2014-02-26 16:05:35 UTC (rev 25896)
@@ -1,9 +1,9 @@
 CVE-2014-XXXX [gnutls: incorrect handling of V1 intermediate certificates]
 	- gnutls26 <not-affected> (versions before 2.7.6)
 	- gnutls28 <not-affected> (versions before 2.7.6)
-	NOTE: need to look gloser, but only affects version prior of 2.7.6
+	NOTE: Only affects version prior of 2.7.6, fix: https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd
 	NOTE: and the issue has different root than CVE-2014-1959
-	TODO: verify, see NOTE
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1069301
 CVE-2013-XXXX [possible DoS in awk magic]
 	- file 1:5.17-0.1 (bug #703993)
 	NOTE: http://bugs.gw.com/view.php?id=164