[Secure-testing-commits] r30034 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-11-13 17:08:41 +0000 (Thu, 13 Nov 2014)
New Revision: 30034

Modified:
   data/CVE/list
Log:
more kfreebsd/jessie entries


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-13 16:50:43 UTC (rev 30033)
+++ data/CVE/list	2014-11-13 17:08:41 UTC (rev 30034)
@@ -11401,6 +11401,7 @@
 CVE-2014-3711 (namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause ...)
 	{DSA-3070-1}
 	- kfreebsd-9 <removed> (bug #766275)
+	[jessie] - kfreebsd-9 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	- kfreebsd-10 10.1~svn273874-1 (bug #766278)
 CVE-2014-3710 [out-of-bounds read in elf note headers]
 	RESERVED
@@ -12366,6 +12367,7 @@
 	NOT-FOR-US: OpenX
 CVE-2014-3800 (XBMC 13.0 uses world-readable permissions for ...)
 	- xbmc <unfixed> (low; bug #747428)
+	[jessie] - xbmc <no-dsa> (Minor issue)
 	[wheezy] - xbmc <no-dsa> (Minor issue)
 	NOTE: http://trac.xbmc.org/ticket/15198
 CVE-2014-3774 (Multiple cross-site scripting (XSS) vulnerabilities in items.php in ...)
@@ -25670,6 +25672,7 @@
 	{DSA-2769-1}
 	- kfreebsd-9 9.2~svn255465-1 (bug #722337)
 	- kfreebsd-8 <removed>
+	[jessie] - kfreebsd-9 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	[jessie] - kfreebsd-8 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	[squeeze] - kfreebsd-8 <end-of-life> (Unsupported in squeeze-lts)
 	[wheezy] - kfreebsd-8 8.3-6+deb7u1
@@ -25723,6 +25726,7 @@
 CVE-2013-5691 (The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in ...)
 	{DSA-2769-1}
 	- kfreebsd-9 9.2~svn255465-1 (bug #722338)
+	[jessie] - kfreebsd-9 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	[jessie] - kfreebsd-8 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	- kfreebsd-8 <removed>
 	[squeeze] - kfreebsd-8 <end-of-life> (Unsupported in squeeze-lts)
@@ -25765,6 +25769,7 @@
 	NOT-FOR-US: Thecus NAS server N8800
 CVE-2013-5666 (The sendfile system-call implementation in sys/kern/uipc_syscalls.c in ...)
 	- kfreebsd-9 9.2~svn255465-1 (bug #722336)
+	[jessie] - kfreebsd-9 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	[wheezy] - kfreebsd-9 <not-affected> (Only affects 9.2.x)
 CVE-2013-5665
 	RESERVED
@@ -27736,6 +27741,8 @@
 	{DSA-2743-1}
 	- kfreebsd-9 9.1-4 (bug #717958)
 	- kfreebsd-8 8.3-7 (bug #717959)
+	[jessie] - kfreebsd-9 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
+	[jessie] - kfreebsd-8 <not-affected> (Kfreebsd 8/9 not present in jessie, workaround for #769128)
 	[wheezy] - kfreebsd-8 8.3-6+deb7u1
 	[squeeze] - kfreebsd-8 <not-affected> (FreeBSD NFS server implementation was not supported in squeeze)
 CVE-2013-4850