[Secure-testing-commits] r35994 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-12 07:54:36 +0000 (Wed, 12 Aug 2015)
New Revision: 35994

Modified:
   data/CVE/list
Log:
Update entry for GNUTLS-SA-2015-2 with respect to lynx-cur SSL support

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-12 06:42:16 UTC (rev 35993)
+++ data/CVE/list	2015-08-12 07:54:36 UTC (rev 35994)
@@ -6359,6 +6359,9 @@
 	NOTE: https://gitlab.com/gnutls/gnutls/commit/0e3fc7881d37246fc2d51dc404cad95b205c0e1e
 	NOTE: https://gitlab.com/gnutls/gnutls/commit/6822a37947d4e38c45b1afc0121cda35ba897182
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/05/05/8
+	NOTE: Updating this alone will break SSL support for lynx. Thus this update was
+	NOTE: requested via a s-p-u together with a lynx update: https://bugs.debian.org/789189
+	NOTE: and https://bugs.debian.org/789393
 CVE-2015-XXXX [crashes on crafted upack packed file]
 	- clamav 0.98.7+dfsg-1
 	[squeeze] - clamav 0.98.7+dfsg-0+deb6u1