[Secure-testing-commits] r34821 - data/CVE

Raphaël Hertzog hertzog at moszumanska.debian.org
Tue Jun 9 14:08:55 UTC 2015


Author: hertzog
Date: 2015-06-09 14:08:55 +0000 (Tue, 09 Jun 2015)
New Revision: 34821

Modified:
   data/CVE/list
Log:
Mark CVE-2015-3420/dovecot as not-affected on squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-09 13:53:02 UTC (rev 34820)
+++ data/CVE/list	2015-06-09 14:08:55 UTC (rev 34821)
@@ -2145,6 +2145,7 @@
 CVE-2015-3420 [SSL/TLS handshake failures leading to a crash of the login process]
 	RESERVED
 	- dovecot 1:2.2.13-12 (bug #783649)
+	[squeeze] - dovecot <not-affected> (Vulnerable code not present & not reproducible)
 	[jessie] - dovecot <no-dsa> (Minor issue, can be fixed through a pu although introduced via security update)
 	[wheezy] - dovecot  <no-dsa> (Minor issue, can be fixed through a pu although introduced via security update)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/26/3




More information about the Secure-testing-commits mailing list