[Secure-testing-commits] r25071 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Jan 7 05:57:01 UTC 2014


Author: jmm
Date: 2014-01-07 05:57:01 +0000 (Tue, 07 Jan 2014)
New Revision: 25071

Modified:
   data/CVE/list
Log:
vnc4 not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-07 05:50:54 UTC (rev 25070)
+++ data/CVE/list	2014-01-07 05:57:01 UTC (rev 25071)
@@ -2579,7 +2579,7 @@
 	RESERVED
 	- openjpeg <not-affected> (only affects 1.5, in experimental, see #731237)
 CVE-2013-6886 (RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to ...)
-	TODO: check, vnc4 source package also affected?
+	- vnc4 <not-affected> (Only affects 5.0.6, binaries in Debian version are not setuid root)
 CVE-2013-6884
 	RESERVED
 	NOT-FOR-US: Ditto Forensic FieldStation




More information about the Secure-testing-commits mailing list