Author: carnil
Date: 2016-02-04 10:17:15 +0000 (Thu, 04 Feb 2016)
New Revision: 39451
Modified:
data/CVE/list
Log:
Add bug reference for nettle issues, #813679
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-02-04 10:06:42 UTC (rev 39450)
+++ data/CVE/list 2016-02-04 10:17:15 UTC (rev 39451)
@@ -242,18 +242,18 @@
- libxml2 <unfixed> (bug #813613)
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=749115
CVE-2015-8805 [miscomputation bugs in secp-256r1 modulo functions]
- - nettle <unfixed>
+ - nettle <unfixed> (bug #813679)
[wheezy] - nettle <not-affected> (Vulnerable code not present)
[squeeze] - nettle <not-affected> (Vulnerable code not present)
NOTE:
https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d
CVE-2015-8804 [Miscalculations on secp384 curve]
- - nettle <unfixed>
+ - nettle <unfixed> (bug #813679)
[wheezy] - nettle <not-affected> (Vulnerable code not present)
[squeeze] - nettle <not-affected> (Vulnerable code not present)
NOTE:
https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html
NOTE:
https://git.lysator.liu.se/nettle/nettle/commit/fa269b6ad06dd13c901dbd84a12e52b918a09cd7
CVE-2015-8803 [secp256 calculation bug]
- - nettle <unfixed>
+ - nettle <unfixed> (bug #813679)
[wheezy] - nettle <not-affected> (Vulnerable code not present)
[squeeze] - nettle <not-affected> (Vulnerable code not present)
NOTE:
https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
