[Secure-testing-commits] r41124 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Apr 24 18:02:25 UTC 2016


Author: carnil
Date: 2016-04-24 18:02:25 +0000 (Sun, 24 Apr 2016)
New Revision: 41124

Modified:
   data/CVE/list
Log:
Update information for CVE-2016-3099

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-24 17:42:25 UTC (rev 41123)
+++ data/CVE/list	2016-04-24 18:02:25 UTC (rev 41124)
@@ -2477,8 +2477,10 @@
 	RESERVED
 CVE-2016-3099 [Invalid handling of +CIPHER operator]
 	RESERVED
-	- libapache2-mod-nss <undetermined>
-	TODO: check
+	- libapache2-mod-nss <unfixed>
+	[jessie] - libapache2-mod-nss <not-affected> (Vulnerability introduced in 1.0.11)
+	[wheezy] - libapache2-mod-nss <not-affected> (Vulnerability introduced in 1.0.11)
+	NOTE: Introduced in https://git.fedorahosted.org/cgit/mod_nss.git/commit/?id=2d1650900f4d47dc43400d826c0f7e1a7c5229b8 (1.10.11)
 CVE-2016-3098
 	RESERVED
 CVE-2016-3097




More information about the Secure-testing-commits mailing list