[Secure-testing-commits] r30116 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-11-18 10:58:46 +0000 (Tue, 18 Nov 2014)
New Revision: 30116

Modified:
   data/CVE/list
Log:
Mark axis2c CVE as <end-of-life> for Squeeze now that #765374 is closed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-18 10:47:10 UTC (rev 30115)
+++ data/CVE/list	2014-11-18 10:58:46 UTC (rev 30116)
@@ -42437,6 +42437,7 @@
 	- hplip <not-affected> (permissions are 755 on wheezy, sid and experimental)
 CVE-2012-6107 (Apache Axis2/C does not verify that the server hostname matches a ...)
 	- axis2c <unfixed> (bug #697974)
+	[squeeze] - axis2c <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.apache.org/jira/browse/AXIS2C-1619
 CVE-2012-6106 (calendar/managesubscriptions.php in the Manage Subscriptions ...)
 	- moodle <not-affected> (Only affects 2.4)
@@ -44735,6 +44736,7 @@
 	NOT-FOR-US: josso
 CVE-2012-5351 (Apache Axis2 allows remote attackers to forge messages and bypass ...)
 	- axis2c <unfixed> (low; bug #690421)
+	[squeeze] - axis2c <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.apache.org/jira/browse/AXIS2C-1607
 CVE-2012-5350 (SQL injection vulnerability in the Pay With Tweet plugin before 1.2 ...)
 	NOT-FOR-US: wp Pay With Tweet plugin