[Secure-testing-commits] r32536 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2015-02-27 22:13:15 +0000 (Fri, 27 Feb 2015)
New Revision: 32536

Modified:
   data/CVE/list
Log:
Mark two 2011 eglibc issues fixed in version 2.11.3-1

They are fixed by the mega-patch debian/patches/svn-updates.diff.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-27 21:10:15 UTC (rev 32535)
+++ data/CVE/list	2015-02-27 22:13:15 UTC (rev 32536)
@@ -58819,7 +58819,7 @@
 CVE-2012-3404 (The vfprintf function in stdio-common/vfprintf.c in libc in GNU C ...)
 	- glibc 2.13-35 (low; bug #681473)
 	- eglibc 2.13-35 (low; bug #681473)
-	[squeeze] - eglibc <no-dsa> (Minor issue)
+	[squeeze] - eglibc 2.11.3-1
 	NOTE: http://sourceware.org/bugzilla/show_bug.cgi?id=12445
 	NOTE: http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=84a4211850e3d23a9d3a4f3b294752a3b30bc0ff
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=833703
@@ -79259,7 +79259,7 @@
 CVE-2011-1089 (The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 ...)
 	- glibc 2.13-8
 	- eglibc 2.13-8
-	[squeeze] - eglibc <no-dsa> (Minor issue)
+	[squeeze] - eglibc 2.11.3-1
 	NOTE: http://seclists.org/oss-sec/2011/q1/368
 	NOTE: http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=e1fb097f447a89aa69a926e45e673a52d86a6c57
 CVE-2011-1088 (Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity ...)