[Secure-testing-commits] r28217 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-08-11 20:23:05 +0000 (Mon, 11 Aug 2014)
New Revision: 28217

Modified:
   data/CVE/list
Log:
no-dsa: cairo, dhcpcd5


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-11 20:02:06 UTC (rev 28216)
+++ data/CVE/list	2014-08-11 20:23:05 UTC (rev 28217)
@@ -328,7 +328,8 @@
 	[wheezy] - libxml-dt-perl <no-dsa> (Minor issue)
 	[squeeze] - libxml-dt-perl <not-affected> (Vulnerable code introduced later)
 CVE-2014-XXXX [dhcpcd DoS attack]
-	- dhcpcd5 <unfixed>
+	- dhcpcd5 <unfixed> (low)
+	[wheezy] - dhcpcd5 <no-dsa> (Minor issue)
 	- dhcpcd <not-affected> (Affects dhcpcd 4.0.0 to 6.4.2)
 	NOTE: http://roy.marples.name/projects/dhcpcd/ci/1d2b93aa5ce25a8a710082fe2d36a6bf7f5794d5?sbs=0
 CVE-2014-5118
@@ -339,7 +340,9 @@
 	- tor 0.2.4.23-1
 	[squeeze] - tor 0.2.4.23-1~deb6u1
 CVE-2014-5116 (The cairo_image_surface_get_data function in Cairo 1.10.2, as used in ...)
-	- cairo <unfixed> (bug #757727)
+	- cairo <unfixed> (low; bug #757727)
+	[wheezy] - cairo <no-dsa> (Minor issue)
+	[squeeze] - cairo <no-dsa> (Minor issue)
 CVE-2014-5077 [net: SCTP: NULL pointer dereference]
 	RESERVED
 	- linux 3.14.15-1