[Secure-testing-commits] r36196 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Wed Aug 19 20:29:32 UTC 2015


Author: jmm
Date: 2015-08-19 20:29:31 +0000 (Wed, 19 Aug 2015)
New Revision: 36196

Modified:
   data/CVE/list
Log:
xerces unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-19 20:16:05 UTC (rev 36195)
+++ data/CVE/list	2015-08-19 20:29:31 UTC (rev 36196)
@@ -78181,16 +78181,12 @@
 	NOTE: limited information about issue, only a video of exploit taking place
 CVE-2012-0881 [xerces-j2 hash table collisions CPU usage DoS]
 	RESERVED
-	- libxerces2-java <unfixed> (low)
-	[jessie] - libxerces2-java <no-dsa> (Minor issue)
-	[wheezy] - libxerces2-java <no-dsa> (Minor issue)
-	[squeeze] - libxerces2-java <no-dsa> (Minor issue)
+	- libxerces2-java <unfixed> (unimportant)
+	NOTE: Negligable impact for Xerces
 CVE-2012-0880 [xerces-c hash table collisions CPU usage DoS]
 	RESERVED
-	- xerces-c <unfixed> (low)
-	[jessie] - xerces-c <no-dsa> (Minor issue)
-	[wheezy] - xerces-c <no-dsa> (Minor issue)
-	[squeeze] - xerces-c <no-dsa> (Minor issue)
+	- xerces-c <unfixed> (unimportant)
+	NOTE: Negligable impact for Xerces
 CVE-2012-0879 (The I/O implementation for block devices in the Linux kernel before ...)
 	{DSA-2469-1}
 	- linux-2.6 2.6.33-1




More information about the Secure-testing-commits mailing list