[Secure-testing-commits] r33486 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2015-04-10 13:51:18 +0000 (Fri, 10 Apr 2015)
New Revision: 33486

Modified:
   data/CVE/list
Log:
Mark xen CVE as <end-of-life> on squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-10 13:46:54 UTC (rev 33485)
+++ data/CVE/list	2015-04-10 13:51:18 UTC (rev 33486)
@@ -689,6 +689,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2015/03/28/5
 CVE-2015-2756 (QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict ...)
 	- xen 4.2.0~rc2-1 (bug #781620)
+	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
 	- qemu <unfixed>
 	[wheezy] - qemu <not-affected> (Vulnerable code not present)
 	[squeeze] - qemu <not-affected> (Vulnerable code not present)
@@ -698,10 +699,12 @@
 	NOT-FOR-US: AB Google Map Travel (AB-MAP) plugin for WordPress
 CVE-2015-2752 (The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, ...)
 	- xen 4.4.1-9 (bug #781620)
+	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-125.html
 CVE-2015-2751 (Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, ...)
 	- xen 4.4.1-9 (bug #781620)
 	[wheezy] - xen <not-affected> (Affected functionality introduced in 4.2)
+	[squeeze] - xen <not-affected> (Affected functionality introduced in 4.2)
 	NOTE: http://xenbits.xen.org/xsa/advisory-127.html
 CVE-2015-2748 (Websense TRITON AP-WEB before 8.0.0 does not properly restrict access ...)
 	NOT-FOR-US: Websense TRITON AP-WEB