[Secure-testing-commits] r35535 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jul 17 17:28:32 UTC 2015


Author: carnil
Date: 2015-07-17 17:28:32 +0000 (Fri, 17 Jul 2015)
New Revision: 35535

Modified:
   data/CVE/list
Log:
Remove one temporary item for squid3, will not recieve a CVE for now

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-17 17:24:43 UTC (rev 35534)
+++ data/CVE/list	2015-07-17 17:28:32 UTC (rev 35535)
@@ -416,12 +416,6 @@
 	[squeeze] - roundcube <not-affected> (Vulnerable code not present)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/07/06/10
 	NOTE: http://trac.roundcube.net/ticket/1490417
-CVE-2015-XXXX [TLS: Disable client-initiated renegotiation]
-	- squid <removed> (unimportant)
-	- squid3 <unfixed> (unimportant)
-	NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13849.patch
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/07/06/8
-	NOTE: Only affects custom builds with --enable-ssl (disabled for license purposes in Debian)
 CVE-2015-5400 [Do not blindly forward cache peer CONNECT responses]
 	- squid <removed>
 	- squid3 <unfixed>




More information about the Secure-testing-commits mailing list