[Secure-testing-commits] r22845 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-07-04 06:15:14 +0000 (Thu, 04 Jul 2013)
New Revision: 22845

Modified:
   data/CVE/list
Log:
CVE-2013-2224 RHEL-specific


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-04 05:53:04 UTC (rev 22844)
+++ data/CVE/list	2013-07-04 06:15:14 UTC (rev 22845)
@@ -5628,8 +5628,8 @@
 	- freeswitch <itp> (bug #389591) 
 CVE-2013-2237 [information leak]
 	RESERVED
-	- linux-2.6 <removed>
-	- linux 3.9.4-1
+	- linux-2.6 <removed> (low)
+	- linux 3.9.4-1 (low)
 	NOTE: https://github.com/torvalds/linux/commit/85dfb745ee40232876663ae206cba35f24ab2a40
 CVE-2013-2236 [Quagga OSPF-API stack overrun]
 	RESERVED
@@ -5672,8 +5672,8 @@
 	NOTE: Only supported behind an authenticated HTTP zone
 CVE-2013-2224 [IP_RETOPTS Buffer Poisoning DoS]
 	RESERVED
-	- linux-2.6 <removed>
-	- linux <unfixed>
+	- linux-2.6 <not-affected> (Caused by RHEL backport)
+	- linux <not-affected> (Caused by RHEL backport)
 CVE-2013-2223 [Multiple remote heap memory disclosures]
 	RESERVED
 	- libzrtpcpp <unfixed> (bug #714650)