[Secure-testing-commits] r22906 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-07-11 07:01:16 +0000 (Thu, 11 Jul 2013)
New Revision: 22906

Modified:
   data/CVE/list
Log:
one wireshark issue only for trunk
new apache issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-11 06:41:39 UTC (rev 22905)
+++ data/CVE/list	2013-07-11 07:01:16 UTC (rev 22906)
@@ -2624,10 +2624,7 @@
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8499
 	NOTE: http://www.wireshark.org/security/wnpa-sec-2013-29.html
 CVE-2013-3561 (Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow ...)
-	- wireshark 1.8.7-1 (bug #709167)
-	[squeeze] - wireshark <not-affected> (Only affects 1.8.x)
-	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448
-	NOTE: http://www.wireshark.org/security/wnpa-sec-2013-29.html
+	- wireshark <not-affected> (This CVE ID is for the Wireshark trunk, the fix 1.8 is CVE-2013-3562)
 CVE-2013-3560 (The dissect_dsmcc_un_download function in ...)
 	{DSA-2700-1}
 	- wireshark 1.8.7-1 (unimportant; bug #709167)
@@ -6972,8 +6969,10 @@
 	- 389-ds-base <unfixed> (bug #704421)
 	NOTE: http://git.fedorahosted.org/cgit/389/ds.git/commit/?h=389-ds-base-1.2.11&id=5a18c828533a670e7143327893f8171a19062286
 	NOTE: https://fedorahosted.org/389/ticket/47308
-CVE-2013-1896
+CVE-2013-1896 [mod_dav DoS]
 	RESERVED
+	- apache2 <unfixed>
+	NOTE: http://www.gossamer-threads.com/lists/apache/announce/427633
 CVE-2013-1895 [concurrency issue leading to auth bypass]
 	RESERVED
 	- python-bcrypt <removed> (bug #704030)