[Secure-testing-commits] r35359 - data/CVE

[Alessandro Ghedini]

Author: ghedo
Date: 2015-07-07 14:20:19 +0000 (Tue, 07 Jul 2015)
New Revision: 35359

Modified:
   data/CVE/list
Log:
Add CVE-2015-3250/apache-directory-api issue (package is in NEW queue)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-07 14:06:17 UTC (rev 35358)
+++ data/CVE/list	2015-07-07 14:20:19 UTC (rev 35359)
@@ -5266,8 +5266,11 @@
 	RESERVED
 CVE-2015-3251
 	RESERVED
-CVE-2015-3250
+CVE-2015-3250 [timing attack vulnerability]
 	RESERVED
+	- apache-directory-api <itp> (bug #789679)
+	NOTE: http://www.openwall.com/lists/oss-security/2015/07/07/5
+	NOTE: pending version in NEW queue is vulnerable
 CVE-2015-3249
 	RESERVED
 CVE-2015-3248