[Secure-testing-commits] r34609 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun May 31 13:21:43 UTC 2015


Author: carnil
Date: 2015-05-31 13:21:43 +0000 (Sun, 31 May 2015)
New Revision: 34609

Modified:
   data/CVE/list
Log:
Mark CVE-2015-3420 as no-dsa

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-31 13:12:12 UTC (rev 34608)
+++ data/CVE/list	2015-05-31 13:21:43 UTC (rev 34609)
@@ -1820,6 +1820,8 @@
 CVE-2015-3420 [SSL/TLS handshake failures leading to a crash of the login process]
 	RESERVED
 	- dovecot 1:2.2.13-12 (bug #783649)
+	[jessie] - dovecot <no-dsa> (Minor issue, can be fixed through a pu although introduced via security update)
+	[wheezy] - dovecot  <no-dsa> (Minor issue, can be fixed through a pu although introduced via security update)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/26/3
 	NOTE: Patch: http://hg.dovecot.org/dovecot-2.2/rev/86f535375750
 	NOTE: Segfault reproducible if using openssl/1.0.2a-1 from sid.




More information about the Secure-testing-commits mailing list