[Secure-testing-commits] r32989 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-19 14:38:20 +0000 (Thu, 19 Mar 2015)
New Revision: 32989

Modified:
   data/CVE/list
Log:
Update status for openssl issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-19 14:21:02 UTC (rev 32988)
+++ data/CVE/list	2015-03-19 14:38:20 UTC (rev 32989)
@@ -1465,6 +1465,7 @@
 	RESERVED
 CVE-2015-1787
 	RESERVED
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-1786
 	RESERVED
 CVE-2015-1785
@@ -7782,26 +7783,32 @@
 	NOTE: https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff (gnutls_3_3_13)
 CVE-2015-0293
 	RESERVED
+	- openssl <not-affected> (SSLv2 disabled in Debian)
 CVE-2015-0292
 	RESERVED
+	- openssl <unfixed>
 CVE-2015-0291
 	RESERVED
-	- openssl <unfixed>
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-0290
 	RESERVED
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-0289
 	RESERVED
+	- openssl <unfixed>
 CVE-2015-0288
 	RESERVED
 	- openssl <unfixed>
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=28a00bcd8e318da18031b2ac8778c64147cd54f9
 CVE-2015-0287
 	RESERVED
+	- openssl <unfixed>
 CVE-2015-0286
 	RESERVED
+	- openssl <unfixed>
 CVE-2015-0285
 	RESERVED
-	- openssl <unfixed>
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e1b568dd2462f7cacf98f3d117936c34e2849a6b
 CVE-2015-0284
 	RESERVED
@@ -8091,8 +8098,10 @@
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a
 CVE-2015-0208
 	RESERVED
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-0207
 	RESERVED
+	- openssl <not-affected> (Only affects 1.0.2, only in experimental)
 CVE-2015-0206 (Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL ...)
 	{DSA-3125-1}
 	- openssl 1.0.1k-1