[Secure-testing-commits] r24427 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-11-25 09:31:59 +0000 (Mon, 25 Nov 2013)
New Revision: 24427

Modified:
   data/CVE/list
Log:
bug filed for jenkins
NFUs
concludes external check


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-11-25 09:24:44 UTC (rev 24426)
+++ data/CVE/list	2013-11-25 09:31:59 UTC (rev 24427)
@@ -219,7 +219,8 @@
 CVE-2013-6764
 	RESERVED
 CVE-2013-6763 (The uio_mmap_physical function in drivers/uio/uio.c in the Linux ...)
-	TODO: check, Red Hat consider this as a non-issue; details?
+	NOTE: Red Hat consider this as a non-issue:
+	NOTE: http://seclists.org/oss-sec/2013/q4/282
 CVE-2013-6762
 	RESERVED
 CVE-2013-6761
@@ -1301,13 +1302,13 @@
 	RESERVED
 CVE-2013-6274
 	RESERVED
-	- jenkins <unfixed>
+	- jenkins <unfixed> (bug #730457)
 CVE-2013-6273
 	RESERVED
-	- jenkins <unfixed>
+	- jenkins <unfixed> (bug #730457)
 CVE-2013-6272
 	RESERVED
-	- jenkins <unfixed>
+	- jenkins <unfixed> (bug #730457)
 CVE-2013-6271
 	RESERVED
 CVE-2013-6270
@@ -5476,7 +5477,7 @@
 	- linux-2.6 <removed> (low)
 	NOTE: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6062a8
 CVE-2013-4482 (Untrusted search path vulnerability in python-paste-script (aka ...)
-	TODO: check
+	NOT-FOR-US: LuCi
 CVE-2013-4481 (Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with ...)
 	NOT-FOR-US: LuCi
 CVE-2013-4480 (Red Hat Satellite 5.6 and earlier does not disable the web interface ...)