Author: carnil
Date: 2014-09-16 18:39:09 +0000 (Tue, 16 Sep 2014)
New Revision: 28834
Modified:
data/CVE/list
Log:
Add note for cyassl CVEs which should be addressed in 3.2.0 upstream
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-09-16 18:06:11 UTC (rev 28833)
+++ data/CVE/list 2014-09-16 18:39:09 UTC (rev 28834)
@@ -8424,15 +8424,19 @@
CVE-2014-2904
RESERVED
- cyassl <unfixed>
+ NOTE: according to maintainer addressed in 3.2.0 upstream
CVE-2014-2903
RESERVED
- cyassl <unfixed>
+ NOTE: according to maintainer addressed in 3.2.0 upstream
CVE-2014-2902
RESERVED
- cyassl <unfixed>
+ NOTE: according to maintainer addressed in 3.2.0 upstream
CVE-2014-2901
RESERVED
- cyassl <unfixed>
+ NOTE: according to maintainer addressed in 3.2.0 upstream
CVE-2014-2900 (wolfSSL CyaSSL before 2.9.4 does not properly validate X.509
...)
- cyassl 2.9.4+dfsg-1
CVE-2014-2899 (wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a
denial ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
