[Secure-testing-commits] r32196 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Feb 12 18:16:23 UTC 2015


Author: carnil
Date: 2015-02-12 18:16:23 +0000 (Thu, 12 Feb 2015)
New Revision: 32196

Modified:
   data/CVE/list
Log:
Add explanation in <not-affected> comment

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-12 18:15:18 UTC (rev 32195)
+++ data/CVE/list	2015-02-12 18:16:23 UTC (rev 32196)
@@ -5727,7 +5727,7 @@
 	RESERVED
 CVE-2015-0224 [qpidd can be crashed by unauthenticated user]
 	RESERVED
-	- qpid-cpp <not-affected>
+	- qpid-cpp <not-affected> (Incomplete fix for CVE-2015-0203 not applied)
 	NOTE: CVE is for incomplete fix for CVE-2015-0203, which is not fixed in Debian
 	NOTE: https://issues.apache.org/jira/browse/QPID-6310
 CVE-2015-0223 (Unspecified vulnerability in Apache Qpid 0.30 and earlier allows ...)




More information about the Secure-testing-commits mailing list