[Secure-testing-commits] r17063 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2011-08-06 23:41:01 +0000 (Sat, 06 Aug 2011)
New Revision: 17063

Modified:
   data/CVE/list
Log:
new eglibc issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-08-06 20:45:54 UTC (rev 17062)
+++ data/CVE/list	2011-08-06 23:41:01 UTC (rev 17063)
@@ -651,8 +651,13 @@
 CVE-2011-2703 (Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x ...)
 	{DSA-2285-1}
 	- mapserver <unfixed>
-CVE-2011-2702
+CVE-2011-2702 [eglibc signedness vulnerability in ssse3 optimizations]
 	RESERVED
+	- eglibc 2.13-10
+	[squeeze] - eglibc <not-affected> (ssse3 optimizations not included in squeeze version)
+	- glibc <not-affected> (ssse3 optimizations not included)
+	NOTE: http://www.nodefense.org/eglibc.txt
+	NOTE: fixed well before 2.13-10, but that is the present testing version that was available to check
 CVE-2011-2701 (The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when ...)
 	TODO: check
 CVE-2011-2700