[Secure-testing-commits] r29158 - data/CVE

Tue Sep 30 06:57:11 UTC 2014

Author: thijs
Date: 2014-09-30 06:57:11 +0000 (Tue, 30 Sep 2014)
New Revision: 29158

Modified:
   data/CVE/list
Log:
no action needed/possible for BREACH


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-09-30 06:52:53 UTC (rev 29157)
+++ data/CVE/list	2014-09-30 06:57:11 UTC (rev 29158)
@@ -27669,7 +27669,7 @@
 	NOT-FOR-US: Zyxel
 CVE-2013-3587 [BREACH attack against HTTP compression]
 	RESERVED
-	TODO: check
+	NOTE: not something we can concretely fix somewhere
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=995168
 CVE-2013-3586 (Samsung Web Viewer for Samsung DVR devices allows remote attackers to ...)
 	NOT-FOR-US: Samsung DVR devices


