[Secure-testing-commits] r35505 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2015-07-16 13:48:57 +0000 (Thu, 16 Jul 2015)
New Revision: 35505

Modified:
   data/CVE/list
Log:
Add links to patches for nss CVE

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-16 13:09:11 UTC (rev 35504)
+++ data/CVE/list	2015-07-16 13:48:57 UTC (rev 35505)
@@ -3682,6 +3682,7 @@
 	NOTE: OpenSSL 1.0.2b-1 limits it to 768 bit, future versions will increase the limit
 	NOTE: GNUTLS: http://lists.gnutls.org/pipermail/gnutls-devel/2015-May/007597.html
 	NOTE: NSS/iceweasel/icedove: https://www.mozilla.org/en-US/security/advisories/mfsa2015-70/
+	NOTE: NSS patch increasing limit to 1023 bits: https://hg.mozilla.org/projects/nss/rev/ae72d76f8d24
 CVE-2015-3999 (Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames ...)
 	NOT-FOR-US: Piriform CCleaner
 CVE-2015-3998
@@ -7473,6 +7474,8 @@
 CVE-2015-2721 (Mozilla Network Security Services (NSS) before 3.19, as used in ...)
 	{DSA-3300-1}
 	- nss 2:3.19.1-1
+	NOTE: NSS PATCH: https://hg.mozilla.org/projects/nss/rev/6b4770c76bc8
+	NOTE: NSS TESTCASE: https://hg.mozilla.org/projects/nss/rev/1865635f5df5
 	- iceweasel 38.1.0esr-1
 	[squeeze] - iceweasel <end-of-life>
 	- icedove <unfixed>