[Secure-testing-commits] r18626 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-03-09 09:19:15 +0000 (Fri, 09 Mar 2012)
New Revision: 18626

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
one kernel issue not in stable
taglib no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-03-09 09:14:43 UTC (rev 18625)
+++ data/CVE/list	2012-03-09 09:19:15 UTC (rev 18626)
@@ -737,7 +737,8 @@
 	NOTE: resource leak
 CVE-2012-1146
 	RESERVED
-	- linux-2.6 <unfixed>
+	- linux-2.6 <unfixed> (low)
+	[squeeze] - linux-2.6 <not-affected> (Vulnerable code not present)
 CVE-2012-1145
 	RESERVED
 CVE-2012-1144
@@ -870,10 +871,12 @@
 	NOT-FOR-US: mwlib not in Debian
 CVE-2012-1108
 	RESERVED
-	- taglib <unfixed> (bug #662705)
+	- taglib <unfixed> (low; bug #662705)
+	[squeeze] - taglib <no-dsa> (Minor issue)
 CVE-2012-1107
 	RESERVED
-	- taglib <unfixed> (bug #662705)
+	- taglib <unfixed> (low; bug #662705)
+	[squeeze] - taglib <no-dsa> (Minor issue)
 CVE-2012-1106
 	RESERVED
 	NOT-FOR-US: abrt is Red Hat / Fedora specific

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2012-03-09 09:14:43 UTC (rev 18625)
+++ data/spu-candidates.txt	2012-03-09 09:19:15 UTC (rev 18626)
@@ -280,6 +280,11 @@
 
 --
 
+taglib (CVE-2012-1107, CVE-2012-1108)
+#662705
+
+--
+
 torcs (CVE-2012-1189)
 #660555