[Secure-testing-commits] r25085 - data/CVE

[Yves-Alexis Perez]

Author: corsac
Date: 2014-01-07 22:30:57 +0000 (Tue, 07 Jan 2014)
New Revision: 25085

Modified:
   data/CVE/list
Log:
update info for lightdm-gtk-greeter CVE


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-07 21:14:12 UTC (rev 25084)
+++ data/CVE/list	2014-01-07 22:30:57 UTC (rev 25085)
@@ -1,3 +1,9 @@
+CVE-2014-0979 [greeter crashes on empty username]
+	- lightdm-gtk-greeter <unfixed> (bug #734472)
+	NOTE: https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=857303
+	[wheezy] - lightdm-gtk-greeter <not-affected>
+	NOTE: in Wheezy, lightdm restarts when the greeter crashes, so there's no DoS
 CVE-2014-0971
 	RESERVED
 CVE-2014-0970
@@ -378,10 +384,6 @@
 	RESERVED
 CVE-2013-7260 (Multiple stack-based buffer overflows in RealNetworks RealPlayer ...)
 	TODO: check
-CVE-2014-XXXX [greeter crashes on empty username]
-	- lightdm-gtk-greeter <unfixed> (bug #734472)
-	NOTE: https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449
-	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=857303
 CVE-2013-XXXX [buffer overflow]
 	- graphviz 2.26.3-16 (bug #729273)
 	NOTE: https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a