[Secure-testing-commits] r26252 - data/CVE

Thijs Kinkhorst thijs at moszumanska.debian.org
Wed Mar 26 12:11:41 UTC 2014


Author: thijs
Date: 2014-03-26 12:11:41 +0000 (Wed, 26 Mar 2014)
New Revision: 26252

Modified:
   data/CVE/list
Log:
sshfp issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-03-26 08:48:16 UTC (rev 26251)
+++ data/CVE/list	2014-03-26 12:11:41 UTC (rev 26252)
@@ -1,3 +1,5 @@
+CVE-2014-XXXX [if the server offers a certificate, the client doesn't check the DNS for SSHFP records]
+	- openssh <unfixed> (low; bug #742513)
 CVE-2014-2652
 	RESERVED
 CVE-2014-2651




More information about the Secure-testing-commits mailing list