[Secure-testing-commits] r29774 - data/CVE

Fri Oct 31 21:23:17 UTC 2014

Author: jmm
Date: 2014-10-31 21:23:17 +0000 (Fri, 31 Oct 2014)
New Revision: 29774

Modified:
   data/CVE/list
Log:
ejabberd bug filed; no-dsa


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-10-31 21:14:31 UTC (rev 29773)
+++ data/CVE/list	2014-10-31 21:23:17 UTC (rev 29774)
@@ -624,7 +624,9 @@
 	- dokuwiki 0.0.20140505.a+dfsg-1 (bug #766545)
 	[squeeze] - dokuwiki <not-affected> (Vulnerable code not present)
 CVE-2014-8760 (ejabberd before 2.1.13 does not enforce the starttls_required setting ...)
-	- ejabberd <unfixed>
+	- ejabberd <unfixed> (low; bug #767535)
+	[squeeze] - ejabberd <no-dsa> (Minor issue)
+	[wheezy] - ejabberd <no-dsa> (Minor issue)
 	NOTE: http://mail.jabber.org/pipermail/operators/2014-October/002438.html
 	NOTE: Patch https://github.com/processone/ejabberd/commit/7bdc1151b
 CVE-2014-8759


