[Secure-testing-commits] r21352 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Wed Feb 20 08:46:50 UTC 2013


Author: carnil
Date: 2013-02-20 08:46:50 +0000 (Wed, 20 Feb 2013)
New Revision: 21352

Modified:
   data/CVE/list
Log:
add also fixed version for keystone

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-02-20 08:39:06 UTC (rev 21351)
+++ data/CVE/list	2013-02-20 08:46:50 UTC (rev 21352)
@@ -198,17 +198,13 @@
 	RESERVED
 CVE-2013-1665 [Information leak via xml entity parsing]
 	RESERVED
-	- keystone <unfixed>
-	TODO: check and add the bugnumbers
-	TODO: notify maintainers about the CVE rejections
+	- keystone 2012.1.1-13 (bug #700948)
 CVE-2013-1664 [Denial of service via xml entity parsing]
 	RESERVED
-	- keystone <unfixed>
+	- keystone 2012.1.1-13 (bug #700948)
 	- nova 2012.1.1-13 (bug #700949)
 	- cinder <unfixed>
 	NOTE: cinder is in the NEW queue
-	TODO: notify maintainers about the CVE rejections
-	TODO: check and add the bugnumbers
 CVE-2012-6532 ((1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in ...)
 	TODO: check
 CVE-2012-6531 ((1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x ...)




More information about the Secure-testing-commits mailing list