[Secure-testing-commits] r27154 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-06-05 07:03:44 +0000 (Thu, 05 Jun 2014)
New Revision: 27154

Modified:
   data/CVE/list
Log:
two new xen issues, N/A for wheezy/squeeze


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-05 06:54:13 UTC (rev 27153)
+++ data/CVE/list	2014-06-05 07:03:44 UTC (rev 27154)
@@ -7,6 +7,14 @@
 	[squeeze] - pulseaudio <no-dsa> (Minor issue)
 	[wheezy] - pulseaudio <no-dsa> (Minor issue)
 	NOTE: http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html
+CVE-2014-3968
+	- xen <unfixed>
+	[wheezy] - xen <not-affected> (Xen versions from 4.2 onwards are vulnerable)
+	[squeeze] - xen <not-affected> (Xen versions from 4.2 onwards are vulnerable)
+CVE-2014-3967
+	- xen <unfixed>
+	[wheezy] - xen <not-affected> (Xen versions from 4.2 onwards are vulnerable)
+	[squeeze] - xen <not-affected> (Xen versions from 4.2 onwards are vulnerable)
 CVE-2014-3966 [mediawiki Javascript inject by anonymous users on private wikis with $wgRawHtml enabled]
 	- mediawiki <unfixed> (low; bug #750527)
 	NOTE: https://bugzilla.wikimedia.org/show_bug.cgi?id=65501