[Secure-testing-commits] r55122 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-08-27 12:05:27 +0000 (Sun, 27 Aug 2017)
New Revision: 55122

Modified:
   data/CVE/list
Log:
wolfssl issues fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-27 12:03:47 UTC (rev 55121)
+++ data/CVE/list	2017-08-27 12:05:27 UTC (rev 55122)
@@ -13390,7 +13390,7 @@
 	- gtk-vnc 0.4.3-1
 	NOTE: Fixed by: https://git.gnome.org/browse/gtk-vnc/commit/?id=f3fc5e57a78d4be9872f1394f697b9929873a737 (release-0.4.3)
 CVE-2017-8855 (wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a ...)
-	- wolfssl <unfixed> (bug #870170)
+	- wolfssl 3.12.0+dfsg-1 (bug #870170)
 	NOTE: Fixed upstream in 3.11.0, https://github.com/wolfSSL/wolfssl/releases/tag/v3.11.0-stable
 CVE-2017-8854 (wolfSSL before 3.10.2 has an out-of-bounds memory access with loading ...)
 	- wolfssl 3.10.2+dfsg-1
@@ -31907,7 +31907,7 @@
 	NOTE: https://github.com/randombit/botan/commit/c927101675e5f63fc0bdd93c5a4825adc54323b4 (1.10.16)
 	NOTE: Bug introduced in 1.6.0 or earlier, fixed in 2.1.0 and 1.10.16
 CVE-2017-2800 (A specially crafted x509 certificate can cause a single out of bounds ...)
-	- wolfssl <unfixed> (bug #862154)
+	- wolfssl 3.12.0+dfsg-1 (bug #862154)
 	NOTE: http://www.talosintelligence.com/reports/TALOS-2017-0293/
 CVE-2017-2799 (An exploitable heap corruption vulnerability exists in the AddSst ...)
 	NOT-FOR-US: Antenna House DMC HTMLFilter