[Secure-testing-commits] r36751 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Sep 19 13:06:24 UTC 2015


Author: carnil
Date: 2015-09-19 13:06:24 +0000 (Sat, 19 Sep 2015)
New Revision: 36751

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-5244 and add bug reference

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-19 12:31:19 UTC (rev 36750)
+++ data/CVE/list	2015-09-19 13:06:24 UTC (rev 36751)
@@ -4825,8 +4825,10 @@
 	NOTE: https://github.com/ceph/ceph/pull/5430
 CVE-2015-5244 [incorrect ciphersuite parsing]
 	RESERVED
-	- libapache2-mod-nss <unfixed>
-	TODO: check
+	- libapache2-mod-nss <unfixed> (bug #799464)
+	[jessie] - libapache2-mod-nss <not-affected> (Vulnerability introduced in 1.0.11)
+	[wheezy] - libapache2-mod-nss <not-affected> (Vulnerability introduced in 1.0.11)
+	NOTE: Introduced in https://git.fedorahosted.org/cgit/mod_nss.git/commit/?id=2d1650900f4d47dc43400d826c0f7e1a7c5229b8 (1.10.11)
 CVE-2015-5243
 	RESERVED
 CVE-2015-5242




More information about the Secure-testing-commits mailing list