Author: jmm
Date: 2015-03-23 07:52:55 +0000 (Mon, 23 Mar 2015)
New Revision: 33065

Modified:
   data/CVE/list
Log:
librest CVEfied
percona tools unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2015-03-23 03:57:52 UTC (rev 33064)
+++ data/CVE/list       2015-03-23 07:52:55 UTC (rev 33065)
@@ -556,13 +556,13 @@
        NOT-FOR-US: fusion_options function in functions.php in the Fusion 
theme for WordPress
 CVE-2015-2193
        RESERVED
-CVE-2014-XXXX [Invalid pointer dereference in the GNOME librest library]
+CVE-2015-2675 [Invalid pointer dereference in the GNOME librest library]
        - librest 0.7.92-3 (bug #780101)
        [wheezy] - librest <not-affected> (rest_proxy_call_get_url not yet used)
        [squeeze] - librest <not-affected> (rest_proxy_call_get_url not yet 
used)
        NOTE: Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=742644
        NOTE: Commit: 
https://git.gnome.org/browse/librest/commit/?id=b50ace7738ea038
-       NOTE: CVE Request: 
http://www.openwall.com/lists/oss-security/2015/03/04/6
+       NOTE: http://www.openwall.com/lists/oss-security/2015/03/04/6
 CVE-2015-2204
        RESERVED
        NOT-FOR-US: Evergreen library
@@ -4035,12 +4035,11 @@
        NOT-FOR-US: D-Link router
 CVE-2015-1027 [MITM vulnerability via version check]
        RESERVED
-       - percona-toolkit <unfixed>
+       - percona-toolkit <unfixed> (unimportant)
        [wheezy] - percona-toolkit <not-affected> (version-check introduced in 
2.1.4)
-       - percona-xtrabackup <unfixed>
-       NOTE: Effect mitigated because of disabled automatic version check due 
to CVE-2014-2029
+       - percona-xtrabackup <unfixed> (unimportant)
+       NOTE: Automatic version check is disabled and inherently insecure 
(CVE-2014-2029)
        NOTE: Patch applied to OpenSUSE 13.1: 
https://build.opensuse.org/package/view_file/openSUSE:13.1:Update/xtrabackup/percona-xtrabackup-CVE-2015-1027.patch?expand=1
-       TODO: check details
 CVE-2015-1026 (Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ...)
        TODO: check
 CVE-2015-1025


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to