[Secure-testing-commits] r30262 - data/CVE

[security tracker role]

Author: sectracker
Date: 2014-11-23 09:10:34 +0000 (Sun, 23 Nov 2014)
New Revision: 30262

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-23 09:04:50 UTC (rev 30261)
+++ data/CVE/list	2014-11-23 09:10:34 UTC (rev 30262)
@@ -24068,6 +24068,7 @@
 CVE-2014-0034 (The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x ...)
 	NOT-FOR-US: Apache CFX
 CVE-2014-0033 (org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat ...)
+	{DLA-91-1}
 	- tomcat6 6.0.39
 CVE-2014-0032 (The get_resource function in repos.c in the mod_dav_svn module in ...)
 	- subversion 1.8.8-1 (low; bug #737815)
@@ -29974,6 +29975,7 @@
 	NOTE: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=12d6e7538e2d418c08f082b1b44ffa5fb7270ed8
 	NOTE: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e40f193f5bb022e927a57a4f5d5194e4f12ddb74
 CVE-2013-4590 (Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before ...)
+	{DLA-91-1}
 	- tomcat6 6.0.39 (low)
 	[squeeze] - tomcat6 <no-dsa> (Minor issue)
 	[wheezy] - tomcat6 <no-dsa> (Minor issue)
@@ -31002,7 +31004,7 @@
 CVE-2013-4323
 	RESERVED
 CVE-2013-4322 (Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before ...)
-	{DSA-2897-1}
+	{DSA-2897-1 DLA-91-1}
 	- tomcat6 6.0.39
 	- tomcat7 7.0.50
 	- tomcat8 8.0.0
@@ -31132,7 +31134,7 @@
 	NOTE: Non-issue, you trust the site providing the gem with installing arbitrary code, allowing
 	NOTE: it a potential elevated CPU consumption doesn't add any extra harm
 CVE-2013-4286 (Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before ...)
-	{DSA-2897-1}
+	{DSA-2897-1 DLA-91-1}
 	- tomcat6 6.0.39
 	- tomcat7 7.0.47
 	- tomcat8 8.0.0
@@ -38783,7 +38785,7 @@
 	NOTE: Upstream bug: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7871
 	NOTE: http://anonsvn.wireshark.org/viewvc?view=revision&revision=45646
 CVE-2013-1571 (Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 ...)
-	{DSA-2727-1 DSA-2722-1}
+	{DSA-2727-1 DSA-2722-1 DLA-91-1}
 	- openjdk-6 6b27-1.12.6-1
 	- openjdk-7 7u25-2.3.10-1
 CVE-2013-1570 (Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows ...)
@@ -51197,6 +51199,7 @@
 	- sudo <not-affected> (Red Hat-specific postinst script)
 CVE-2012-3439
 	REJECTED
+	{DLA-91-1}
 CVE-2012-3438 (The Magick_png_malloc function in coders/png.c in GraphicsMagick ...)
 	- graphicsmagick 1.3.16-1.1 (low; bug #683284)
 	[squeeze] - graphicsmagick <no-dsa> (Minor issue)