[Secure-testing-commits] r39451 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Feb 4 10:17:15 UTC 2016


Author: carnil
Date: 2016-02-04 10:17:15 +0000 (Thu, 04 Feb 2016)
New Revision: 39451

Modified:
   data/CVE/list
Log:
Add bug reference for nettle issues, #813679

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-04 10:06:42 UTC (rev 39450)
+++ data/CVE/list	2016-02-04 10:17:15 UTC (rev 39451)
@@ -242,18 +242,18 @@
 	- libxml2 <unfixed> (bug #813613)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=749115
 CVE-2015-8805 [miscomputation bugs in secp-256r1 modulo functions]
-	- nettle <unfixed>
+	- nettle <unfixed> (bug #813679)
 	[wheezy] - nettle <not-affected> (Vulnerable code not present)
 	[squeeze] - nettle <not-affected> (Vulnerable code not present)
 	NOTE: https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d
 CVE-2015-8804 [Miscalculations on secp384 curve]
-	- nettle <unfixed>
+	- nettle <unfixed> (bug #813679)
 	[wheezy] - nettle <not-affected> (Vulnerable code not present)
 	[squeeze] - nettle <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html
 	NOTE: https://git.lysator.liu.se/nettle/nettle/commit/fa269b6ad06dd13c901dbd84a12e52b918a09cd7
 CVE-2015-8803 [secp256 calculation bug]
-	- nettle <unfixed>
+	- nettle <unfixed> (bug #813679)
 	[wheezy] - nettle <not-affected> (Vulnerable code not present)
 	[squeeze] - nettle <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html




More information about the Secure-testing-commits mailing list