[Secure-testing-commits] r19053 - data/CVE

[Florian Weimer]

Author: fw
Date: 2012-04-24 12:37:49 +0000 (Tue, 24 Apr 2012)
New Revision: 19053

Modified:
   data/CVE/list
Log:
CVE-2011-2709: libgssglue not exploitable via mount.nfs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-24 09:57:51 UTC (rev 19052)
+++ data/CVE/list	2012-04-24 12:37:49 UTC (rev 19053)
@@ -12930,7 +12930,9 @@
 	- joomla <itp> (bug #571794)
 CVE-2011-2709
 	RESERVED
-	- libgssglue <unfixed> (medium)
+	- libgssglue <unfixed> (low)
+	NOTE: Our mount.nfs does not link against libgssglue,
+	NOTE: so we do not appear to be affected directly.
 CVE-2011-2708
 	REJECTED
 	NOTE: duplicate of CVE-2011-2710, will be rejected