[Secure-testing-commits] r25070 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-01-07 05:50:54 +0000 (Tue, 07 Jan 2014)
New Revision: 25070

Modified:
   data/CVE/list
Log:
openssl N/A for oldstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-07 05:48:45 UTC (rev 25069)
+++ data/CVE/list	2014-01-07 05:50:54 UTC (rev 25070)
@@ -3624,7 +3624,7 @@
 CVE-2013-6450 (The DTLS retransmission implementation in OpenSSL through 0.9.8y and ...)
 	{DSA-2833-1}
 	- openssl 1.0.1e-5 (low)
-	[squeeze] - openssl <no-dsa> (Minor issue, limited DTLS support in 0.9.8 branch)
+	[squeeze] - openssl <not-affected> (Versions earlier than 1.0.0 are not affected)
 CVE-2013-6449 (The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before ...)
 	{DSA-2833-1}
 	- openssl 1.0.1e-5 (bug #732754)
@@ -8831,6 +8831,7 @@
 CVE-2013-4353 [TLS record tampering]
 	RESERVED
 	- openssl 1.0.1f-1
+	[squeeze] - openssl <not-affected> (Only affects 1.0.1 to 1.0.1e)
 CVE-2013-4352
 	RESERVED
 CVE-2013-4351 (GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all ...)