[Secure-testing-commits] r28924 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-09-20 07:52:02 +0000 (Sat, 20 Sep 2014)
New Revision: 28924

Modified:
   data/CVE/list
Log:
Expand TODO note for CVE-2014-6421 and CVE-2014-6422

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-20 07:48:48 UTC (rev 28923)
+++ data/CVE/list	2014-09-20 07:52:02 UTC (rev 28924)
@@ -461,12 +461,12 @@
 	RESERVED
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-12.html
-	TODO: check
+	TODO: check, 1.12 series possibly not affected (only 1.10.0 to 1.10.9)
 CVE-2014-6421 [RTP dissector crash (wnpa-sec-2014-12)]
 	RESERVED
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-12.html
-	TODO: check
+	TODO: check, 1.12 series possibly not affected (only 1.10.0 to 1.10.9)
 CVE-2014-6418 [libceph: missing validation of the auth reply]
 	RESERVED
 	- linux 3.16.3-1