[Secure-testing-commits] r31263 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-01-11 07:34:59 +0000 (Sun, 11 Jan 2015)
New Revision: 31263

Modified:
   data/CVE/list
Log:
Add upstream commit for CVE-2014-3572

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-11 07:25:39 UTC (rev 31262)
+++ data/CVE/list	2015-01-11 07:34:59 UTC (rev 31263)
@@ -16759,6 +16759,7 @@
 	NOT-FOR-US: oVirt Engine
 CVE-2014-3572 (The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before ...)
 	- openssl 1.0.1k-1
+	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ef28c6d6767a6a30df5add36171894c96628fe98
 CVE-2014-3571 (OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k ...)
 	- openssl 1.0.1k-1
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=8d7aab986b499f34d9e1bc58fbfd77f05c38116e