[Secure-testing-commits] r34638 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-06-01 16:09:37 +0000 (Mon, 01 Jun 2015)
New Revision: 34638

Modified:
   data/CVE/list
Log:
add reference for strongswan
attic no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-01 15:54:49 UTC (rev 34637)
+++ data/CVE/list	2015-06-01 16:09:37 UTC (rev 34638)
@@ -180,6 +180,7 @@
 CVE-2015-4082 [encrypted backups attack]
 	RESERVED
 	- attic <unfixed>
+	[jessie] - attic <no-dsa> (Minor issue)
 	NOTE: https://github.com/jborg/attic/issues/271
 	NOTE: https://github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072
 	NOTE: http://www.openwall.com/lists/oss-security/2015/05/25/3
@@ -392,6 +393,7 @@
 	[jessie] - strongswan <not-affected> (only affects 5.2.2+ and 5.3.0+)
 	[wheezy] - strongswan <not-affected> (only affects 5.2.2+ and 5.3.0+)
 	[squeeze] - strongswan <not-affected> (only affects 5.2.2+ and 5.3.0+)
+	NOTE: http://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-(cve-2015-3991).html
 CVE-2015-3990 (The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, ...)
 	NOT-FOR-US: Dell
 CVE-2015-3989 (Multiple cross-site scripting (XSS) vulnerabilities in concrete5 ...)