[Secure-testing-commits] r25772 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-02-17 08:00:36 +0000 (Mon, 17 Feb 2014)
New Revision: 25772

Modified:
   data/CVE/list
Log:
db4o unimportant, only docs
cifs issue not in oldstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-17 06:28:57 UTC (rev 25771)
+++ data/CVE/list	2014-02-17 08:00:36 UTC (rev 25772)
@@ -107,15 +107,15 @@
 CVE-2014-1870 (Opera before 19 on Mac OS X allows user-assisted remote attackers to ...)
 	NOT-FOR-US: Opera
 CVE-2014-1869 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	- db4o <unfixed>
+	- db4o <unfixed> (unimportant)
 	NOTE: in -doc package
 CVE-2013-7325
 	{DSA-2836-1}
 	- devscripts 2.13.9
 CVE-2013-7321 (Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access ...)
-	TODO: check
+	NOT-FOR-US: D-Link hardware
 CVE-2013-7320 (Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 ...)
-	TODO: check
+	NOT-FOR-US: D-Link hardware
 CVE-2013-7319 (Cross-site scripting (XSS) vulnerability in the Download Manager ...)
 	TODO: check
 CVE-2012-6637
@@ -4890,13 +4890,12 @@
 CVE-2014-0071 [Security Groups fail to block network traffic]
 	RESERVED
 	- neutron <unfixed>
-	TODO: check
 CVE-2014-0070
 	RESERVED
 CVE-2014-0069 [cifs: incorrect handling of bogus user pointers during uncached writes]
 	RESERVED
 	- linux <unfixed>
-	- linux-2.6 <removed>
+	- linux-2.6 <not-affected> (Only affects 2.6.38 and later)
 	NOTE: http://article.gmane.org/gmane.linux.kernel.cifs/9401
 CVE-2014-0068
 	RESERVED