[Secure-testing-commits] r38348 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-12-16 11:52:03 +0000 (Wed, 16 Dec 2015)
New Revision: 38348

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
new samba issue
git-repair unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-16 09:10:12 UTC (rev 38347)
+++ data/CVE/list	2015-12-16 11:52:03 UTC (rev 38348)
@@ -1695,7 +1695,8 @@
 CVE-2014-9758
 	RESERVED
 CVE-2015-XXXX [uses non-random tempdir /tmp/tmprepo.0/.git/]
-	- git-repair 1.20151215-1 (bug #807341)
+	- git-repair 1.20151215-1 (unimportant; bug #807341)
+	NOTE: Non-exploitable on release archs due to kernel hardening
 CVE-2015-8537 [Data disclosure in atom feed]
 	RESERVED
 	- redmine <unfixed> (bug #807826)
@@ -16314,6 +16315,10 @@
 	NOT-FOR-US: Web Console Ruby Gem
 CVE-2015-3223
 	RESERVED
+	- samba <unfixed>
+	[wheezy] - samba <not-affected> (Only affects 4.0.0 to 4.3.2)
+	[squeeze] - samba <not-affected> (Only affects 4.0.0 to 4.3.2)
+	NOTE: https://www.samba.org/samba/security/CVE-2015-3223.html
 CVE-2015-3222
 	RESERVED
 CVE-2015-3221 (OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 ...)

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-12-16 09:10:12 UTC (rev 38347)
+++ data/dsa-needed.txt	2015-12-16 11:52:03 UTC (rev 38348)
@@ -67,6 +67,8 @@
 --
 pygments
 --
+samba
+--
 smarty3
 --
 squid/oldstable