[Secure-testing-commits] r24662 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-12-10 06:10:00 +0000 (Tue, 10 Dec 2013)
New Revision: 24662

Modified:
   data/CVE/list
Log:
mod-nss, snmp no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-10 06:02:02 UTC (rev 24661)
+++ data/CVE/list	2013-12-10 06:10:00 UTC (rev 24662)
@@ -6486,7 +6486,8 @@
 	NOTE: https://bugzilla.wikimedia.org/show_bug.cgi?id=55332
 CVE-2013-4566 [incorrect handling of NSSVerifyClient in directory context]
 	RESERVED
-	- libapache2-mod-nss <unfixed> (bug #731627)
+	- libapache2-mod-nss <unfixed> (low; bug #731627)
+	[wheezy] - libapache2-mod-nss <no-dsa> (Minor issue)
 CVE-2013-4565 [heap-based buffer overflow]
 	RESERVED
 	- xlhtml <unfixed> (bug #729279)
@@ -19619,7 +19620,9 @@
 	RESERVED
 CVE-2012-6151 [snmpd DoS when AgentX subagent times-out]
 	RESERVED
-	- net-snmp <unfixed> (bug #731625)
+	- net-snmp <unfixed> (low; bug #731625)
+	[wheezy] - net-snmp <no-dsa> (Minor issue)
+	[squeeze] - net-snmp <no-dsa> (Minor issue)
 	NOTE: http://sourceforge.net/p/net-snmp/bugs/2411/
 CVE-2012-6150 (The winbind_name_list_to_sid_string_list function in ...)
 	- samba 2:4.0.13+dfsg-1