[Secure-testing-commits] r36061 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-14 13:01:04 +0000 (Fri, 14 Aug 2015)
New Revision: 36061

Modified:
   data/CVE/list
Log:
Update CVE-2015-3277, libapache2-mod-nss not affected, introduced in 1.0.11

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-14 11:57:49 UTC (rev 36060)
+++ data/CVE/list	2015-08-14 13:01:04 UTC (rev 36061)
@@ -7125,8 +7125,8 @@
 	NOT-FOR-US: nss_compat_ossl (OpenSSL to NSS Porting Library)
 CVE-2015-3277 [incorrect multi-keyword mode cipherstring parsing]
 	RESERVED
-	- libapache2-mod-nss <undetermined>
-	TODO: check
+	- libapache2-mod-nss <not-affected> (Vulnerability introduced in 1.0.11)
+	NOTE: Introduced by https://git.fedorahosted.org/cgit/mod_nss.git/commit/?id=2d1650900f4d47dc43400d826c0f7e1a7c5229b8 (1.10.11)
 CVE-2015-3276 [incorrect multi-keyword mode cipherstring parsing]
 	RESERVED
 	- openldap <unfixed> (unimportant)