[Secure-testing-commits] r47099 - data/CVE

Thu Dec 15 12:03:19 UTC 2016

Author: carnil
Date: 2016-12-15 12:03:19 +0000 (Thu, 15 Dec 2016)
New Revision: 47099

Modified:
   data/CVE/list
Log:
Expand note for CVE-2016-9574

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-12-15 12:00:55 UTC (rev 47098)
+++ data/CVE/list	2016-12-15 12:03:19 UTC (rev 47099)
@@ -7962,6 +7962,7 @@
 	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1320695
 	NOTE: The issue persists (although without segfault) up to 3.27. Using SessionTicket extension along
 	NOTE: with any  ECDHE-ECDSA ciphersuite renders unusable any subsequent connection to selfserv.
+	NOTE: Proposed patch (not yet) finalized in upstream bug 1320695.
 CVE-2016-9573
 	RESERVED
 	- openjpeg2 <unfixed>


