[Secure-testing-commits] r21617 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-03-14 15:53:05 +0000 (Thu, 14 Mar 2013)
New Revision: 21617

Modified:
   data/CVE/list
Log:
autofs fixed in wheezy, not in stable
thanks to carnil for the analysis!


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-14 15:41:57 UTC (rev 21616)
+++ data/CVE/list	2013-03-14 15:53:05 UTC (rev 21617)
@@ -15859,7 +15859,8 @@
 	[squeeze] - mediawiki <not-affected> (bug #677895; only affects experimental version 1.9.0)
 	- mediawiki 1:1.19.1-1
 CVE-2012-2697 (Unspecified vulnerability in autofs, as used in Red Hat Enterprise ...)
-	TODO: check, probably NFU (as description mentions RedHat patch)
+	- autofs 5.0.6-1
+	NOTE: Fixed upstream with "fix paged ldap map read"
 CVE-2012-2696 (The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) ...)
 	NOT-FOR-US: Red Hat Enterprise Virtualisation
 CVE-2012-2695 (The Active Record component in Ruby on Rails before 3.0.14, 3.1.x ...)