[Secure-testing-commits] r46416 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-22 06:07:11 +0000 (Tue, 22 Nov 2016)
New Revision: 46416

Modified:
   data/CVE/list
Log:
Update CVE-2016-8635/nss

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-22 05:58:54 UTC (rev 46415)
+++ data/CVE/list	2016-11-22 06:07:11 UTC (rev 46416)
@@ -2479,9 +2479,9 @@
 	NOTE: Introduced by: http://git.kernel.org/cgit/boot/dracut/dracut.git/commit/?id=5f2c30d9bcd614d546d5c55c6897e33f88b9ab90 (030)
 CVE-2016-8636
 	RESERVED
-CVE-2016-8635
+CVE-2016-8635 [small-subgroups attack flaw]
 	RESERVED
-	- nss <unfixed>
+	- nss 2:3.25-1
 	NOTE: Patch as applied in CentOS (but contains other changes):
 	NOTE: https://git.centos.org/blob/rpms!nss!/aada6b10b73091276397404059605d13e7548462/SOURCES!moz-1314604.patch
 	NOTE: Further info: https://bugzilla.redhat.com/show_bug.cgi?id=1391818