[Secure-testing-commits] r28331 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-08-18 12:49:38 +0000 (Mon, 18 Aug 2014)
New Revision: 28331

Modified:
   data/CVE/list
Log:
two xen issues no-dsa for wheezy
mark remaining xen issues as EOLed for squeeze


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-18 12:38:32 UTC (rev 28330)
+++ data/CVE/list	2014-08-18 12:49:38 UTC (rev 28331)
@@ -338,6 +338,8 @@
 CVE-2014-5149 [XSA-97]
 	RESERVED
 	- xen <unfixed>
+	[wheezy] - xen <no-dsa> (Minor issue, too intrusive to backport)
+	[squeeze] - xen <end-of-life> (Unsupported in squeeze-lts)
 CVE-2014-5148 [XSA-103]
 	RESERVED
 	- xen <unfixed>
@@ -350,7 +352,9 @@
 	[squeeze] - xen <not-affected> (Vulnerable code not present)
 CVE-2014-5146 [XSA-97]
 	RESERVED
-	- xen <unfixed>
+	- xen <unfixed> (low)
+	[wheezy] - xen <no-dsa> (Minor issue, too intrusive to backport)
+	[squeeze] - xen <end-of-life> (Unsupported in squeeze-lts)
 CVE-2014-5145
 	RESERVED
 CVE-2014-5144
@@ -2989,6 +2993,7 @@
 	- ppc64-diag <itp> (bug #740179)
 CVE-2014-4021 (Xen 3.2.x through 4.4.x does not properly clean memory pages recovered ...)
 	- xen <unfixed> (bug #751894)
+	[squeeze] - xen <end-of-life> (Unsupported in squeeze-lts)
 CVE-2014-4020 (The dissect_frame function in epan/dissectors/packet-frame.c in the ...)
 	- wireshark 1.10.8-1
 	[wheezy] - wireshark <not-affected> (Only affects 1.10.0 to 1.10.7)