[Secure-testing-commits] r25869 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-02-24 13:34:00 +0000 (Mon, 24 Feb 2014)
New Revision: 25869

Modified:
   data/CVE/list
Log:
eglibc fixed
linux N/a


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-24 11:11:55 UTC (rev 25868)
+++ data/CVE/list	2014-02-24 13:34:00 UTC (rev 25869)
@@ -10833,9 +10833,8 @@
 CVE-2013-4738 (Multiple stack-based buffer overflows in the MSM camera driver for the ...)
 	- linux <not-affected> (Android-specific camera drivers)
 CVE-2013-4737 (The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, ...)
-	- linux <unfixed>
-	- linux-2.6 <removed>
-	TODO: check
+	- linux <not-affected> (Affected code not in mainline kernel)
+	- linux-2.6 <not-affected> (Affected code not in mainline kernel)
 	NOTE: https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=4256415b296348ff16cd17a5b8f8dce4dea37328
 CVE-2013-4736 (Multiple integer overflows in the JPEG engine drivers in the MSM ...)
 	NOTE: https://www.codeaurora.org/projects/security-advisories/integer-overflow-and-signedness-issue-camera-jpeg-engines-cve-2013-4736
@@ -17591,7 +17590,7 @@
 	[squeeze] - tpp <no-dsa> (Minor issue)
 	[wheezy] - tpp <no-dsa> (Minor issue)
 CVE-2013-2207 (pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not ...)
-	- eglibc <unfixed> (low; bug #717544)
+	- eglibc 2.18-1 (low; bug #717544)
 	[squeeze] - eglibc <no-dsa> (Minor issue)
 	[wheezy] - eglibc <no-dsa> (Minor issue)
 CVE-2013-2206 (The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in ...)