[Secure-testing-commits] r32627 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-04 05:57:00 +0000 (Wed, 04 Mar 2015)
New Revision: 32627

Modified:
   data/CVE/list
Log:
Add CVE-2014-8155, gnutls, from external check, left todo since open to check versions

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-04 05:54:49 UTC (rev 32626)
+++ data/CVE/list	2015-03-04 05:57:00 UTC (rev 32627)
@@ -9999,8 +9999,12 @@
 	- phonefsod 0.1+git20121018-2
 	[wheezy] - phonefsod <no-dsa> (Minor issue)
 	[squeeze] - phonefsod <no-dsa> (Minor issue)
-CVE-2014-8155
+CVE-2014-8155 [gnutls does not perform date/time checks on CA certificates]
 	RESERVED
+	- gnutls26 <removed>
+	- gnutls28 <unfixed>
+	NOTE: Fixed by: https://gitorious.org/gnutls/gnutls/commit/897cbce62c0263a498088ac3e465aa5f05f8719c
+	TODO: check
 CVE-2014-8154 (The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect ...)
 	- vala-0.26 <unfixed> (bug #775913)
 	- vala-0.16 <not-affected> (MapInfo not yet present)