[Secure-testing-commits] r46645 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2016-11-29 20:46:38 +0000 (Tue, 29 Nov 2016)
New Revision: 46645

Modified:
   data/CVE/list
Log:
Summary: add details about nss CVE-2016-9074 issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-29 20:45:03 UTC (rev 46644)
+++ data/CVE/list	2016-11-29 20:46:38 UTC (rev 46645)
@@ -2028,11 +2028,12 @@
 	RESERVED
 	- firefox 50.0-1
 	- firefox-esr <not-affected> (Does not affect Firefox 45 ESR release)
-CVE-2016-9074
+CVE-2016-9074 [existing mitigation of timing side-channel attacks insufficient]
 	RESERVED
 	{DSA-3716-1}
 	- nss 2:3.26.2-1
 	NOTE: Fixed by (3_26_BRANCH): https://hg.mozilla.org/projects/nss/rev/d38536fcc726 (3.26.1)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2016-90/
 	- firefox-esr 45.5.0esr-1
 CVE-2016-9073
 	RESERVED