[Secure-testing-commits] r35408 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-07-10 06:33:46 +0000 (Fri, 10 Jul 2015)
New Revision: 35408

Modified:
   data/CVE/list
Log:
nova, libmimedir no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-10 06:33:25 UTC (rev 35407)
+++ data/CVE/list	2015-07-10 06:33:46 UTC (rev 35408)
@@ -5736,6 +5736,8 @@
 	NOTE: Using the above code as is might break existing installations since a keytab is required to call krb5_verify_init_creds
 CVE-2015-3205 (libmimedir allows remote attackers to execute arbitrary code via a VCF ...)
 	- libmimedir <removed> (bug #789197)
+	[jessie] - libmimedir <no-dsa> (Minor issue)
+	[wheezy] - libmimedir <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1222251
 CVE-2015-3204 (libreswan 3.9 through 3.12 allows remote attackers to cause a denial ...)
 	- libreswan <itp> (bug #773459)
@@ -9700,6 +9702,8 @@
 CVE-2015-1850 [Host file disclosure through qcow2 backing file]
 	RESERVED
 	- nova <unfixed>
+	[jessie] - nova <no-dsa> (Minor issue)
+	[wheezy] - nova <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/06/13/1
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1231816
 	NOTE: https://bugs.launchpad.net/cinder/+bug/1415087