[Secure-testing-commits] r34385 - in data: CVE DSA

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-05-21 14:36:45 +0000 (Thu, 21 May 2015)
New Revision: 34385

Modified:
   data/CVE/list
   data/DSA/list
Log:
CVE assigned for zeromq3 issue, #784366

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-21 14:01:09 UTC (rev 34384)
+++ data/CVE/list	2015-05-21 14:36:45 UTC (rev 34385)
@@ -998,13 +998,11 @@
 	NOTE: will enericons example.html files if present. As the file was included
 	NOTE: in other popular themes and plugins maybe it should as well be included
 	NOTE: in an update for wordpress for wheezy?
-CVE-2015-XXXX [V3 protocol handler vulnerable to downgrade attacks]
+CVE-2014-9721 [V3 protocol handler vulnerable to downgrade attacks]
 	- zeromq3 4.0.5+dfsg-3 (bug #784366)
-	[jessie] - zeromq3 4.0.5+dfsg-2+deb8u1
-	NOTE: Explicitly add jessie-tagged entry until CVE is assigned and cross-reference built automatically from DSA/list
 	NOTE: https://github.com/zeromq/libzmq/issues/1273
 	NOTE: https://github.com/zeromq/zeromq4-x/commit/b6e3e0f601e2c1ec1f3aac880ed6a3fe63043e51
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/05/07/8
+	NOTE: http://www.openwall.com/lists/oss-security/2015/05/07/8
 CVE-2015-3643
 	RESERVED
 CVE-2015-3642

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2015-05-21 14:01:09 UTC (rev 34384)
+++ data/DSA/list	2015-05-21 14:36:45 UTC (rev 34385)
@@ -37,6 +37,7 @@
 	{CVE-2015-3622}
 	[jessie] - libtasn1-6 4.2-3+deb8u1
 [10 May 2015] DSA-3255-1 zeromq3 - security update
+	{CVE-2014-9721}
 	[jessie] - zeromq3 4.0.5+dfsg-2+deb8u1
 [09 May 2015] DSA-3254-1 suricata - security update
 	{CVE-2015-0971}