[Secure-testing-commits] r30220 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Fri Nov 21 12:04:51 UTC 2014


Author: jmm
Date: 2014-11-21 12:04:51 +0000 (Fri, 21 Nov 2014)
New Revision: 30220

Modified:
   data/CVE/list
Log:
one asterisk issue only affects sid (there's a significant gap between 11 in testing
  and 13 in sid, it needs to be checked whether the 11 series will be maintainable for
  an entire stable release)
add missing eol entries for asterisk in squeeze


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-21 11:47:43 UTC (rev 30219)
+++ data/CVE/list	2014-11-21 12:04:51 UTC (rev 30220)
@@ -4,36 +4,44 @@
 	NOTE: split this entry up when CVEs assigned
 CVE-2014-XXXX [AST-2014-018]
 	- asterisk <unfixed>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24534
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-018.html
 	TODO: check
 CVE-2014-XXXX [AST-2014-017]
 	- asterisk <unfixed>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24490
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-017.html
 	TODO: check
 CVE-2014-XXXX [AST-2014-016]
 	- asterisk <undetermined>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24471
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-016.html
 	TODO: check, only 12.x, 13.x?
 CVE-2014-XXXX [AST-2014-015]
-	- asterisk <undetermined>
+	- asterisk <unfixed>
+	[jessie] - asterisk <not-affected> (PJSIP channel not available yet)
+	[wheezy] - asterisk <not-affected> (PJSIP channel not available yet)
+	[squeeze] - asterisk <not-affected> (PJSIP channel not available yet)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24471
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-015.html
-	TODO: check, only 12.x, 13.x?
 CVE-2014-XXXX [AST-2014-014]
 	- asterisk <unfixed>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24440
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-014.html
 	TODO: check
 CVE-2014-XXXX [AST-2014-013]
 	- asterisk <undetermined>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24531
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-013.html
 	TODO: check, only 12.x, 13.x?
 CVE-2014-XXXX [AST-2014-012]
 	- asterisk <unfixed>
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-24469
 	NOTE: http://downloads.digium.com/pub/security/AST-2014-012.html
 	TODO: check




More information about the Secure-testing-commits mailing list