[Secure-testing-commits] r34877 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-06-11 14:48:04 +0000 (Thu, 11 Jun 2015)
New Revision: 34877

Modified:
   data/CVE/list
Log:
new openssl issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-11 13:59:29 UTC (rev 34876)
+++ data/CVE/list	2015-06-11 14:48:04 UTC (rev 34877)
@@ -7269,6 +7269,8 @@
 	RESERVED
 CVE-2015-1792
 	RESERVED
+	- openssl <unfixed>
+	NOTE: http://openssl.org/news/secadv_20150611.txt
 CVE-2015-1791 [race condition in NewSessionTicket]
 	RESERVED
 	- openssl <unfixed>
@@ -7277,10 +7279,16 @@
 	NOTE: https://git.openssl.org/?p=openssl.git;a=commit;h=708cf593587e2fda67dae9782991ff9fccc781eb
 CVE-2015-1790
 	RESERVED
+	- openssl <unfixed>
+	NOTE: http://openssl.org/news/secadv_20150611.txt
 CVE-2015-1789
 	RESERVED
+	- openssl <unfixed>
+	NOTE: http://openssl.org/news/secadv_20150611.txt
 CVE-2015-1788
 	RESERVED
+	- openssl <unfixed>
+	NOTE: http://openssl.org/news/secadv_20150611.txt
 CVE-2015-1787 (The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL ...)
 	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-1786 [Invalid CSRF validation of null or incorrectly formatted token identifiers]
@@ -16771,6 +16779,8 @@
 	RESERVED
 CVE-2014-8176
 	RESERVED
+	- openssl <unfixed>
+	NOTE: http://openssl.org/news/secadv_20150611.txt
 CVE-2014-8175
 	RESERVED
 CVE-2014-8174