[Secure-testing-commits] r30154 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-11-19 16:50:47 +0000 (Wed, 19 Nov 2014)
New Revision: 30154

Modified:
   data/CVE/list
Log:
Update status of CVE-2014-7824 on squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-19 16:31:17 UTC (rev 30153)
+++ data/CVE/list	2014-11-19 16:50:47 UTC (rev 30154)
@@ -2718,7 +2718,8 @@
 	RESERVED
 	- dbus 1.8.10-1
 	[wheezy] - dbus <no-dsa> (Minor issue, will be fixed trough a stable proposed update)
-	[squeeze] - dbus <no-dsa> (Minor issue)
+	[squeeze] - dbus <not-affected> (dbus 1.2.x does not support FD passing)
+	NOTE: Since this CVE is only a complement for the fix to CVE-2014-3636, versions not affected by CVE-2014-3636 do not need the patch provided for this CVE.
 CVE-2014-7823 (The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote ...)
 	- libvirt 1.2.9-4 (bug #769149)
 	[wheezy] - libvirt <not-affected> (Introduced in v1.0.0)