[Secure-testing-commits] r19548 - data/CVE

[Yves-Alexis Perez]

Author: corsac
Date: 2012-06-21 12:06:51 +0000 (Thu, 21 Jun 2012)
New Revision: 19548

Modified:
   data/CVE/list
Log:
update status for some CVEs known elsewhere


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-06-20 21:14:27 UTC (rev 19547)
+++ data/CVE/list	2012-06-21 12:06:51 UTC (rev 19548)
@@ -2128,6 +2128,7 @@
 	- joomla <itp> (bug #571794)
 CVE-2012-2746
 	RESERVED
+	NOT-FOR-US: 389-ds not in Debian
 CVE-2012-2745
 	RESERVED
 CVE-2012-2744
@@ -2293,6 +2294,7 @@
 	NOT-FOR-US: Red Hat Network configuration client
 CVE-2012-2678
 	RESERVED
+	NOT-FOR-US: 389-ds not in Debian
 CVE-2012-2677
 	RESERVED
 	- boost1.42 <removed>
@@ -10286,6 +10288,7 @@
 	[lenny] - rocksndiamonds <no-dsa> (Contrib not supported)
 CVE-2011-4605
 	RESERVED
+	NOTE: seems to only affects jboss 5 according to https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4605 but I'm not so sure about jbossas4
 CVE-2011-4604 [http://seclists.org/oss-sec/2011/q4/496]
 	RESERVED
 	- batmand-adv-kernelland <removed>