[Secure-testing-commits] r23847 - data/CVE
Salvatore Bonaccorso
carnil at alioth.debian.org
Tue Oct 1 16:45:29 UTC 2013
Author: carnil
Date: 2013-10-01 16:45:29 +0000 (Tue, 01 Oct 2013)
New Revision: 23847
Modified:
data/CVE/list
Log:
CVE for systemd where assigned, add to data/CVE/list
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-10-01 15:12:00 UTC (rev 23846)
+++ data/CVE/list 2013-10-01 16:45:29 UTC (rev 23847)
@@ -1,16 +1,3 @@
-CVE-2013-XXXX [systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages]
- - systemd <unfixed>
- [wheezy] - systemd <not-affected> (Vulnerable code not present)
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859051
-CVE-2013-XXXX [systemd: TOCTOU race condition when updating file permissions and SELinux security contexts]
- - systemd <unfixed>
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859060
-CVE-2013-XXXX [systemd: Possibility of denial of logging service by processing native messages from file]
- - systemd <unfixed>
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859104
-CVE-2013-XXXX [systemd: Improper sanitization of invalid XKB layouts descriptions]
- - systemd <unfixed>
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=862324
CVE-2013-5960 (The authenticated-encryption feature in the symmetric-encryption ...)
NOT-FOR-US: OWASP Enterprise Security API for Java
CVE-2013-5958
@@ -3442,14 +3429,19 @@
RESERVED
CVE-2013-4395
RESERVED
-CVE-2013-4394
- RESERVED
-CVE-2013-4393
- RESERVED
-CVE-2013-4392
- RESERVED
-CVE-2013-4391
- RESERVED
+CVE-2013-4394 [systemd: Improper sanitization of invalid XKB layouts descriptions]
+ - systemd <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=862324
+CVE-2013-4393 [systemd: Possibility of denial of logging service by processing native messages from file]
+ - systemd <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859104
+CVE-2013-4392 [systemd: TOCTOU race condition when updating file permissions and SELinux security contexts]
+ - systemd <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859060
+CVE-2013-4391 [systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages]
+ - systemd <unfixed>
+ [wheezy] - systemd <not-affected> (Vulnerable code not present)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859051
CVE-2013-4390
RESERVED
CVE-2013-4389
More information about the Secure-testing-commits
mailing list