[Secure-testing-commits] r39264 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2016-01-28 16:04:54 +0000 (Thu, 28 Jan 2016)
New Revision: 39264

Modified:
   data/CVE/list
Log:
new openssl issues (one only in testing/sid and the other only in squeeze)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-28 15:40:23 UTC (rev 39263)
+++ data/CVE/list	2016-01-28 16:04:54 UTC (rev 39264)
@@ -4066,6 +4066,10 @@
 	RESERVED
 CVE-2016-0701
 	RESERVED
+	- openssl <unfixed>
+	[jessie] - openssl <not-affected> (Only affects 1.0.2)
+	[wheezy] - openssl <not-affected> (Only affects 1.0.2)
+	[squeeze] - openssl <not-affected> (Only affects 1.0.2)
 CVE-2015-8591
 	RESERVED
 CVE-2015-8590
@@ -21009,6 +21013,8 @@
 	NOT-FOR-US: Undertow module of WildFly / JBOSS
 CVE-2015-3197
 	RESERVED
+	- openssl 1.0.0c-2
+	NOTE: 1.0.0c-2 dropped SSLv2 support
 CVE-2015-3196 (ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and ...)
 	{DSA-3413-1}
 	- openssl 1.0.2d-1