Secure testing commits - Nov 2009 - r13271 - in data: CVE NMU

Author: derevko-guest
Date: 2009-11-10 19:35:47 +0000 (Tue, 10 Nov 2009)
New Revision: 13271

Modified:
   data/CVE/list
   data/NMU/list
Log:
CVE-2009-3767: NMUed
CVE-2009-3767: openldap2.3 is also affected


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-11-10 18:49:14 UTC (rev 13270)
+++ data/CVE/list	2009-11-10 19:35:47 UTC (rev 13271)
@@ -304,7 +304,8 @@
 CVE-2009-3768
 	RESERVED
 CVE-2009-3767 (libraries/libldap/tls_o.c in OpenLDAP, when OpenSSL is used,
does not ...)
-	- openldap <unfixed> (medium; bug #553432)
+	- openldap 2.4.17-2.1 (medium; bug #553432)
+	- openldap2.3 <removed>
 CVE-2009-3766 (mutt_ssl.c in mutt 1.5.16, when OpenSSL is used, does not verify
the ...)
 	- mutt <not-affected> (uses GnuTLS and not OpenSSL)
 	NOTE: our mutt is linked against gnutls, bug #553433

Modified: data/NMU/list
==================================================================---
data/NMU/list	2009-11-10 18:49:14 UTC (rev 13270)
+++ data/NMU/list	2009-11-10 19:35:47 UTC (rev 13271)
@@ -175,3 +175,4 @@
 2009-10-14 kdelibs 4:3.5.10.dfsg.1-2.1
 2009-10-22 openexr 1.6.1-4.1
 2009-11-09 libgd2 2.0.36~rc1~dfsg-3.1
+2009-11-10 openldap 2.4.17-2.1