[Secure-testing-commits] r29417 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-10-15 14:36:19 +0000 (Wed, 15 Oct 2014)
New Revision: 29417

Modified:
   data/CVE/list
Log:
librsync no-dsa
libvpx n/a


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-15 13:05:53 UTC (rev 29416)
+++ data/CVE/list	2014-10-15 14:36:19 UTC (rev 29417)
@@ -14,6 +14,8 @@
 	- rsync <unfixed> (low)
 CVE-2014-8242
 	- librsync <unfixed> (low)
+	[wheezy] - librsync <no-dsa> (Minor issue, too instruive to backport)
+	[squeeze] - librsync <no-dsa> (Minor issue, too instruive to backport)
 CVE-2014-8241
 	- tigervnc <itp> (bug #650394)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1151312
@@ -16075,6 +16077,8 @@
 	[squeeze] - iceweasel <end-of-life>
 	[squeeze] - icedove <end-of-life>
 	- libvpx <unfixed> (bug #765435)
+	[wheezy] - libvpx <not-affected> (vp9 codec not yet present)
+	[squeeze] - libvpx <not-affected> (vp9 codec not yet present)
 	NOTE: https://www.mozilla.org/security/announce/2014/mfsa2014-77.html
 	NOTE: https://hg.mozilla.org/releases/mozilla-esr31/rev/6023f0b4f8ba
 CVE-2014-1577