[Secure-testing-commits] r35510 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2015-07-16 17:05:16 +0000 (Thu, 16 Jul 2015)
New Revision: 35510

Modified:
   data/CVE/list
Log:
Triage new issues for squeeze-lts

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-16 16:31:23 UTC (rev 35509)
+++ data/CVE/list	2015-07-16 17:05:16 UTC (rev 35510)
@@ -136,6 +136,7 @@
 	- kdepim <unfixed> (bug #791800)
 	[jessie] - kdepim <no-dsa> (Minor issue)
 	[wheezy] - kdepim <no-dsa> (Minor issue)
+	[squeeze] - kdepim <not-affected> (Bogus condition not present)
 	NOTE: https://bugs.kde.org/show_bug.cgi?id=340312
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/07/15/5
 CVE-2013-7443 [SQLite array overrun in the skip-scan optimization]
@@ -6053,8 +6054,10 @@
 CVE-2015-3185 [Replacement of ap_some_auth_required with new ap_some_authn_required and ap_force_authn hook]
 	RESERVED
 	- apache2 <unfixed>
+	[squeeze] - apache2 <not-affected> (Bug introduced during 2.4 development)
 	NOTE: https://www.apache.org/dist/httpd/Announcement2.4.txt
 	NOTE: https://www.apache.org/dist/httpd/CHANGES_2.4.16
+	NOTE: http://svn.apache.org/viewvc?view=revision&revision=1684525
 CVE-2015-3184
 	RESERVED
 CVE-2015-3183 [Fix chunk header parsing defect]
@@ -6062,6 +6065,7 @@
 	- apache2 <unfixed>
 	NOTE: https://www.apache.org/dist/httpd/Announcement2.4.txt
 	NOTE: https://www.apache.org/dist/httpd/CHANGES_2.4.16
+	NOTE: http://svn.apache.org/viewvc?view=revision&revision=1684515
 CVE-2015-3182 [crash on a sample capture file genbroad.snoop]
 	RESERVED
 	- wireshark 1.12.0~rc1-1