[Secure-testing-commits] r26053 - data/CVE

Tue Mar 11 05:55:22 UTC 2014

Author: carnil
Date: 2014-03-11 05:55:22 +0000 (Tue, 11 Mar 2014)
New Revision: 26053

Modified:
   data/CVE/list
Log:
Update CVE-2014-0128, marking as unimportant

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-03-11 05:54:49 UTC (rev 26052)
+++ data/CVE/list	2014-03-11 05:55:22 UTC (rev 26053)
@@ -5702,8 +5702,9 @@
 CVE-2014-0128 [Denial of Service in SSL-Bump]
 	RESERVED
 	- squid <not-affected> (All Squid-3.0 and older versions not vulnerable)
-	- squid3 <unfixed> (bug #741312)
+	- squid3 <unfixed> (unimportant; bug #741312)
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2014_1.txt
+	NOTE: only affects package rebuilds with --enable-ssl by users
 CVE-2014-0127
 	RESERVED
 CVE-2014-0126


