Author: jmm Date: 2015-03-29 17:26:39 +0000 (Sun, 29 Mar 2015) New Revision: 33237
Modified: data/CVE/list Log: dokuwiki no-dsa mark cups as unimportant vlc n/a in wheezy Modified: data/CVE/list =================================================================== --- data/CVE/list 2015-03-29 14:15:31 UTC (rev 33236) +++ data/CVE/list 2015-03-29 17:26:39 UTC (rev 33237) @@ -869,6 +869,8 @@ NOTE: Upstream commit: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea CVE-2015-XXXX [Insufficient escaping in user manager allows XSS attack] - dokuwiki 0.0.20140929.d-1 (bug #780817) + [wheezy] - dokuwiki <no-dsa> (Minor issue) + [squeeze] - dokuwiki <no-dsa> (Minor issue) CVE-2015-XXXX [Incorrect fix for CVE-2012-1836] - inspircd 2.0.16-1 (bug #780880) NOTE: Correct fix: https://github.com/inspircd/inspircd/commit/ed28c1ba666b39581adb860bf51cdde43c84cc89 @@ -11692,10 +11694,9 @@ NOT-FOR-US: Red Hat vdms and vdsclient CVE-2014-8166 [code execution via unescape ANSI escape sequences] RESERVED - - cups <unfixed> (low) - [wheezy] - cups <no-dsa> (Minor issue) - [squeeze] - cups <no-dsa> (Minor issue) + - cups <unfixed> (unimportant) NOTE: Patch: https://bugzilla.redhat.com/attachment.cgi?id=916761 + NOTE: Terminal emulators need to perform proper escaping CVE-2014-8165 (scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the ...) - powerpc-utils <not-affected> (Vulnerable code not present) NOTE: http://sourceforge.net/p/powerpc-utils/mailman/message/32884230 @@ -15914,7 +15915,7 @@ CVE-2014-6440 [Heap Overflow in VLC Transcode Module] RESERVED - vlc 2.1.5-1 (low) - [wheezy] - vlc <no-dsa> (Minor issue) + [wheezy] - vlc <not-affected> (Introduced in 2.1) [squeeze] - vlc <end-of-life> (Unsupported in squeeze-lts) CVE-2014-6439 (Cross-site scripting (XSS) vulnerability in the CORS functionality in ...) - elasticsearch 1.0.3+dfsg-4 (bug #763958; low) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits