[Secure-testing-commits] r46100 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-10 15:44:48 +0000 (Thu, 10 Nov 2016)
New Revision: 46100

Modified:
   data/CVE/list
Log:
Add CVE-2016-7055

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-10 15:41:10 UTC (rev 46099)
+++ data/CVE/list	2016-11-10 15:44:48 UTC (rev 46100)
@@ -6651,8 +6651,14 @@
 	RESERVED
 CVE-2016-7056
 	RESERVED
-CVE-2016-7055
+CVE-2016-7055 [Montgomery multiplication may produce incorrect results]
 	RESERVED
+	- openssl <unfixed> (low)
+	[jessie] - openssl <not-affected> (Only affects (1.0.2 and 1.1.0)
+	[wheezy] - openssl <not-affected> (Only affects (1.0.2 and 1.1.0)
+	- openssl1.0 <unfixed> (low)
+	NOTE: https://www.openssl.org/news/secadv/20161110.txt
+	NOTE: https://git.openssl.org/?p=openssl.git;a=commit;h=2fac86d9abeaa643677d1ffd0a139239fdf9406a
 CVE-2016-7054 [ChaCha20/Poly1305 heap-buffer-overflow]
 	RESERVED
 	- openssl <unfixed>