[Git][security-tracker-team/security-tracker][master] drop three <postponed> entries for openssl
Moritz Muehlenhoff
jmm at debian.org
Fri Nov 30 15:31:14 GMT 2018
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
719e8fb4 by Moritz Muehlenhoff at 2018-11-30T15:30:40Z
drop three <postponed> entries for openssl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -55503,7 +55503,6 @@ CVE-2018-0738
CVE-2018-0737 (The OpenSSL RSA Key generation algorithm has been shown to be ...)
{DLA-1449-1}
- openssl 1.1.0h-3 (low; bug #895844)
- [stretch] - openssl <postponed> (Can wait for next DSA and upstream release)
[wheezy] - openssl <postponed> (Can wait for next update)
- openssl1.0 1.0.2q-1 (low; bug #895845)
[stretch] - openssl1.0 <postponed> (Can wait for next DSA and upstream release)
@@ -55516,14 +55515,12 @@ CVE-2018-0736
CVE-2018-0735 (The OpenSSL ECDSA signature algorithm has been shown to be vulnerable ...)
{DLA-1586-1}
- openssl 1.1.1a-1
- [stretch] - openssl <postponed> (Wait for next DSA and upstream release)
- openssl1.0 <not-affected> (Vulnerable code never present in 1.0.2 series)
NOTE: https://www.openssl.org/news/secadv/20181029.txt
NOTE: OpenSSL_1_1_1-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4
NOTE: OpenSSL_1_1_0-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=56fb454d281a023b3f950d969693553d3f3ceea1
CVE-2018-0734 (The OpenSSL DSA signature algorithm has been shown to be vulnerable to ...)
- openssl 1.1.1a-1
- [stretch] - openssl <postponed> (Wait for next DSA and upstream release)
[jessie] - openssl <postponed> (vulnerable code not present, but see note below)
- openssl1.0 1.0.2q-1
[stretch] - openssl1.0 <postponed> (Wait for next DSA and upstream release)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/719e8fb4b67746d0237a34136aeb22390092531c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/719e8fb4b67746d0237a34136aeb22390092531c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181130/9763fbe7/attachment.html>
More information about the debian-security-tracker-commits
mailing list