[Secure-testing-commits] r23802 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-09-27 11:41:14 +0000 (Fri, 27 Sep 2013)
New Revision: 23802

Modified:
   data/CVE/list
Log:
bug filed for chicken (no-dsa)
zabbix non-issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-27 09:43:35 UTC (rev 23801)
+++ data/CVE/list	2013-09-27 11:41:14 UTC (rev 23802)
@@ -818,9 +818,9 @@
 	RESERVED
 CVE-2013-5572 [password leak]
 	RESERVED
-	- zabbix <undetermined>
+	- zabbix <unfixed> (unimportant)
 	NOTE: http://seclists.org/fulldisclosure/2013/Sep/151
-	TODO: check
+	NOTE: Non-issue
 CVE-2013-5571
 	RESERVED
 CVE-2013-5570 (Cross-site scripting (XSS) vulnerability in the Javascript and CSS ...)
@@ -3403,7 +3403,9 @@
 	RESERVED
 CVE-2013-4385 [Buffer overrun]
 	RESERVED
-	- chicken <unfixed>
+	- chicken <unfixed> (bug #724740; low)
+	[wheezy] - chicken <no-dsa> (Minor issue)
+	[squeeze] - chicken <no-dsa> (Minor issue)
 	NOTE: http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git;a=commit;h=cd1b9775005ebe220ba11265dbf5396142e65f26
 CVE-2013-4384
 	RESERVED
@@ -5577,7 +5579,8 @@
 	RESERVED
 CVE-2013-3565 [XSS in HTTP Interface]
 	RESERVED
-	- vlc 2.0.7-1
+	- vlc 2.0.7-1 (unimportant)
+	NOTE: Negligable impact
 CVE-2013-3564
 	RESERVED
 CVE-2013-3563 (Stack-based buffer overflow in db_netserver in Lianja SQL Server ...)