[Secure-testing-commits] r25306 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-01-21 06:05:26 +0000 (Tue, 21 Jan 2014)
New Revision: 25306

Modified:
   data/CVE/list
Log:
Add notes about CVE-2013-1740, no further checking done so far

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-21 05:32:55 UTC (rev 25305)
+++ data/CVE/list	2014-01-21 06:05:26 UTC (rev 25306)
@@ -17333,6 +17333,8 @@
 CVE-2013-1740 [false start PR_Recv information disclosure security issue]
 	RESERVED
 	- nss 2:3.15.4-1
+	NOTE: oldstable might not be affected, introduced in 3.12.9?
+	NOTE: See: https://bugzilla.redhat.com/show_bug.cgi?id=1053725#c8
 CVE-2013-1739 (Mozilla Network Security Services (NSS) before 3.15.2 does not ensure ...)
 	{DSA-2790-1}
 	- nss 2:3.15.2-1 (bug #726473)