[Secure-testing-commits] r36194 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-08-19 20:14:50 +0000 (Wed, 19 Aug 2015)
New Revision: 36194

Modified:
   data/CVE/list
Log:
kde-workspace fixed
cobbler bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-19 19:33:38 UTC (rev 36193)
+++ data/CVE/list	2015-08-19 20:14:50 UTC (rev 36194)
@@ -15532,7 +15532,7 @@
 CVE-2014-9593 (Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote ...)
 	NOT-FOR-US: Apache CloudStack
 CVE-2015-1308 (kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote ...)
-	- kde-workspace <unfixed> (low)
+	- kde-workspace 4:5.1.95-1
 	[wheezy] - kde-workspace <no-dsa> (Minor issue)
 	[jessie] - kde-workspace <no-dsa> (Minor issue)
 CVE-2015-1307 (plasma-workspace before 5.1.95 allows remote attackers to obtain ...)
@@ -90852,8 +90852,8 @@
 	- xpdf 3.02-9
 	- poppler <not-affected> (never used t1lib)
 CVE-2011-1551 (SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ ...)
-	- cobbler <unfixed>
-	TODO: check, /var/log/cobbler is set to cobbler:cobbler and daemon runs as root
+	- cobbler <unfixed> (bug #796151)
+	NOTE: /var/log/cobbler is set to cobbler:cobbler and daemon runs as root
 CVE-2011-1550 (The default configuration of logrotate on SUSE openSUSE Factory uses ...)
 	- logrotate <not-affected> (SuSE-specific, see CVE-2011-1548 for Debian)
 CVE-2011-1549 (The default configuration of logrotate on Gentoo Linux uses root ...)