[Secure-testing-commits] r23968 - in data: . CVE DSA

Moritz Muehlenhoff jmm at alioth.debian.org
Fri Oct 11 14:25:46 UTC 2013


Author: jmm
Date: 2013-10-11 14:25:46 +0000 (Fri, 11 Oct 2013)
New Revision: 23968

Modified:
   data/CVE/list
   data/DSA/list
   data/dsa-needed.txt
Log:
drupal and systemd DSAs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-11 14:25:08 UTC (rev 23967)
+++ data/CVE/list	2013-10-11 14:25:46 UTC (rev 23968)
@@ -11839,6 +11839,7 @@
 CVE-2013-1464 (Cross-site scripting (XSS) vulnerability in ssets/player.swf in the ...)
 	{DSA-2772-1}
 	- typo3-src 4.5.29+dfsg1-1
+	[squeeze] - typo3-src <no-dsa> (Too intrusive to backport)
 CVE-2013-1463 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2013-1462 (Integer signedness error in the ExecuteSoapAction function in the ...)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2013-10-11 14:25:08 UTC (rev 23967)
+++ data/DSA/list	2013-10-11 14:25:46 UTC (rev 23968)
@@ -1,3 +1,9 @@
+[11 Oct 2013] DSA-2777-1 systemd - several
+	{CVE-2013-4327 CVE-2013-4391 CVE-2013-4394}
+	[wheezy] - systemd 44-11+deb7u4
+[11 Oct 2013] DSA-2776-1 drupal6 - several
+	{CVE-2012-0825 CVE-2012-0826 CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 CVE-2013-0244 CVE-2013-0245}
+	[squeeze] - drupal6 6.28-1
 [10 Oct 2013] DSA-2775-1 ejabberd - insecure SSL usage
 	[squeeze] - ejabberd 2.1.5-3+squeeze2
 	[wheezy] - ejabberd 2.1.10-4+deb7u1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2013-10-11 14:25:08 UTC (rev 23967)
+++ data/dsa-needed.txt	2013-10-11 14:25:46 UTC (rev 23968)
@@ -17,8 +17,6 @@
 --
 chromium-browser
 --
-drupal6/oldstable (jmm)
---
 eglibc
 --
 gdm/oldstable
@@ -90,8 +88,6 @@
 --
 srtp (nion)
 --
-systemd/stable (jmm)
---
 tomcat7/stable (jmm)
 --
 vlc




More information about the Secure-testing-commits mailing list