[Secure-testing-commits] r17973 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2012-01-01 22:42:51 +0000 (Sun, 01 Jan 2012)
New Revision: 17973

Modified:
   data/CVE/list
Log:
update-manager/software-center issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-01 22:21:34 UTC (rev 17972)
+++ data/CVE/list	2012-01-01 22:42:51 UTC (rev 17973)
@@ -5853,17 +5853,20 @@
 	NOT-FOR-US: HP Onboard Administrator
 CVE-2011-3154
 	RESERVED
-	- update-manager <unfixed> (bug #650307)
+	- update-manager <not-affected> (ubuntu-specific issue)
+	NOTE: see bug #650307
 CVE-2011-3153
 	RESERVED
 	- lightdm 1.0.6-2
 CVE-2011-3152
 	RESERVED
-	- update-manager <unfixed> (bug #650307)
+	- update-manager <not-affected> (ubuntu-specific issue)
+	NOTE: see bug #650307
 CVE-2011-3151
 	RESERVED
 CVE-2011-3150 (Software Center in Ubuntu 11.10, 11.04 10.10 does not properly ...)
-	TODO: check
+	- software-center <not-affected> (ubuntu-specific issue)
+	NOTE: debian package does not contain the vulnerable purchaseview.py code, and probably won't ever as that's part of their commercial interface code
 CVE-2011-3149
 	RESERVED
 	{DSA-2326-1}