[Secure-testing-commits] r23879 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-10-04 14:09:34 +0000 (Fri, 04 Oct 2013)
New Revision: 23879

Modified:
   data/CVE/list
Log:
systemd bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-04 14:07:46 UTC (rev 23878)
+++ data/CVE/list	2013-10-04 14:09:34 UTC (rev 23879)
@@ -3493,22 +3493,22 @@
 	NOT-FOR-US: Simple Machines Forum
 CVE-2013-4394 [systemd: Improper sanitization of invalid XKB layouts descriptions]
 	RESERVED
-	- systemd <unfixed>
+	- systemd <unfixed> (bug #725357)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=862324
 	NOTE: http://cgit.freedesktop.org/systemd/systemd/commit/?id=0b507b17a760b21e33fc52ff377db6aa5086c680
 CVE-2013-4393 [systemd: Possibility of denial of logging service by processing native messages from file]
 	RESERVED
-	- systemd <unfixed>
+	- systemd <unfixed> (bug #725357)
 	[wheezy] - systemd <not-affected> (Vulnerable code not present)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859104
 	NOTE: http://cgit.freedesktop.org/systemd/systemd/commit/?id=1dfa7e79a60de680086b1d93fcc3629b463f58bd
 CVE-2013-4392 [systemd: TOCTOU race condition when updating file permissions and SELinux security contexts]
 	RESERVED
-	- systemd <unfixed>
+	- systemd <unfixed> (bug #725357)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859060
 CVE-2013-4391 [systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages]
 	RESERVED
-	- systemd <unfixed>
+	- systemd <unfixed> (bug #725357)
 	[wheezy] - systemd <not-affected> (Vulnerable code not present)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=859051
 	NOTE: http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e