[Secure-testing-commits] r29955 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-11-10 19:21:43 +0000 (Mon, 10 Nov 2014)
New Revision: 29955

Modified:
   data/CVE/list
Log:
Add notes for CVE-2014-8564/gnutls

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-10 16:40:10 UTC (rev 29954)
+++ data/CVE/list	2014-11-10 19:21:43 UTC (rev 29955)
@@ -78,6 +78,9 @@
 	RESERVED
 CVE-2014-8564 (Denial of service in GnuTLS 3 when printing elliptic curves parameters)
 	- gnutls28 <unfixed>
+	NOTE: Upstream patch https://gitorious.org/gnutls/gnutls/commit/7429872b74c8216bbf15e241e47aba94369ef083
+	NOTE: http://www.gnutls.org/security.html#GNUTLS-SA-2014-5
+	NOTE: in experimental fixed in 3.3.10-1
 CVE-2014-8563
 	RESERVED
 CVE-2014-8560