[Secure-testing-commits] r31708 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-01-26 22:52:17 +0000 (Mon, 26 Jan 2015)
New Revision: 31708

Modified:
   data/CVE/list
Log:
kdeworkspace no-dsa / NFU


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-26 21:21:39 UTC (rev 31707)
+++ data/CVE/list	2015-01-26 22:52:17 UTC (rev 31708)
@@ -830,12 +830,12 @@
 	NOT-FOR-US: Apache CloudStack
 CVE-2015-1308 [X11 clients can eavesdrop input events while screen is locked]
 	RESERVED
-	- kde-workspace <unfixed>
-	TODO: check
+	- kde-workspace <unfixed> (low)
+	[wheezy] - kde-workspace <no-dsa> (Minor issue)
+	[jessie] - kde-workspace <no-dsa> (Minor issue)
 CVE-2015-1307 [plasma-workspace: Network access from screen locker]
 	RESERVED
-	- kde-workspace <unfixed>
-	TODO: check
+	NOT-FOR-US: KDE Plasma 5 desktop, not yet packaged
 CVE-2015-1306 (The newsletter posting area in the web interface in Sympa 6.0.x before ...)
 	{DSA-3134-1}
 	- sympa 6.1.23~dfsg-2