[Secure-testing-commits] r55177 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-08-29 06:46:45 +0000 (Tue, 29 Aug 2017)
New Revision: 55177

Modified:
   data/CVE/list
Log:
new openssl issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-29 04:11:33 UTC (rev 55176)
+++ data/CVE/list	2017-08-29 06:46:45 UTC (rev 55177)
@@ -28797,7 +28797,9 @@
 CVE-2017-3736
 	RESERVED
 CVE-2017-3735 (While parsing an IPAdressFamily extension in an X.509 certificate, it ...)
-	TODO: check
+	- openssl <unfixed>
+	NOTE: Fix for 1.0.2: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=31c8b265591a0aaa462a1f3eb5770661aaac67db
+	NOTE: Fix for 1.1.0: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=068b963bb7afc57f5bdd723de0dd15e7795d5822
 CVE-2017-3734
 	REJECTED
 CVE-2017-3733 (During a renegotiation handshake if the Encrypt-Then-Mac extension is ...)