[Secure-testing-commits] r51819 - data/CVE

Mon May 22 10:19:16 UTC 2017

Author: hertzog
Date: 2017-05-22 10:19:16 +0000 (Mon, 22 May 2017)
New Revision: 51819

Modified:
   data/CVE/list
Log:
Mark CVE-2014-9970 as no-dsa on wheezy

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-05-22 10:19:02 UTC (rev 51818)
+++ data/CVE/list	2017-05-22 10:19:16 UTC (rev 51819)
@@ -93,6 +93,7 @@
 	TODO: check
 CVE-2014-9970 (jasypt before 1.9.2 allows a timing attack against the password hash ...)
 	- jasypt 1.9.2-1
+	[wheezy] - jasypt <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/jasypt/code/668/
 CVE-2017-9100 (login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote ...)
 	NOT-FOR-US: D-Link


