[Secure-testing-commits] r27620 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-07-06 12:40:53 +0000 (Sun, 06 Jul 2014)
New Revision: 27620

Modified:
   data/CVE/list
Log:
Update CVE-2014-2980 for experimental version

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-07-06 09:43:10 UTC (rev 27619)
+++ data/CVE/list	2014-07-06 12:40:53 UTC (rev 27620)
@@ -4228,10 +4228,11 @@
 CVE-2014-2986 (The vgic_distr_mmio_write function in the virtual guest interrupt ...)
 	- xen <not-affected> (Only 32-bit and 64-bit ARM systems are vulnerable from Xen 4.4 onwards)
 CVE-2014-2980 (Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run ...)
-	- gnustep-base 1.24.6-1 (bug #745470)
+	- gnustep-base <unfixed> (bug #745470)
 	[wheezy] - gnustep-base <no-dsa> (Minor issue)
 	[squeeze] - gnustep-base <no-dsa> (Minor issue)
 	NOTE: https://savannah.gnu.org/bugs/?41751
+	NOTE: fixed in experimental with 1.24.6-1, merge entry when uploaded to unstable
 CVE-2014-2915 (Xen 4.4.x, when running on ARM systems, does not properly restrict ...)
 	- xen <not-affected> (Only 32-bit and 64-bit ARM systems are vulnerable from Xen 4.4 onwards)
 CVE-2014-2913 (** DISPUTED ** Incomplete blacklist vulnerability in nrpe.c in Nagios ...)