[Secure-testing-commits] r38391 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-12-17 13:08:37 +0000 (Thu, 17 Dec 2015)
New Revision: 38391

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
yubiserver no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-17 13:03:01 UTC (rev 38390)
+++ data/CVE/list	2015-12-17 13:08:37 UTC (rev 38391)
@@ -1,7 +1,6 @@
 CVE-2015-XXXX [XSA-166: ioreq handling possibly susceptible to multiple read issue]
 	- xen <unfixed>
 	NOTE: http://xenbits.xen.org/xsa/advisory-166.html
-	TODO: check
 CVE-2015-8572 (Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 ...)
 	TODO: check
 CVE-2015-8571 (Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 ...)
@@ -28,7 +27,6 @@
 	RESERVED
 	- xen <unfixed>
 	NOTE: http://xenbits.xen.org/xsa/advisory-165.html
-	TODO: check
 CVE-2015-8554 [qemu-dm buffer overrun in MSI-X handling]
 	RESERVED
 	- xen <unfixed>
@@ -24395,6 +24393,7 @@
 CVE-2015-0842 [SQL injection issues (potential auth bypass)]
 	RESERVED
 	- yubiserver 0.6-1 (bug #796495)
+	[jessie] - yubiserver <no-dsa> (Minor issue)
 CVE-2015-0841 [off-by-one buffer overflow in Listener::checkActivity in libcapsinetwork/monopd]
 	RESERVED
 	- libcapsinetwork <removed> (bug #781044; unimportant)

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-12-17 13:03:01 UTC (rev 38390)
+++ data/dsa-needed.txt	2015-12-17 13:08:37 UTC (rev 38391)
@@ -80,6 +80,3 @@
 --
 xscreensaver
   mgilbert mentioned in bug report to take care of the DSA
---
-yubiserver
---