[Secure-testing-commits] r35665 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-07-24 06:30:35 +0000 (Fri, 24 Jul 2015)
New Revision: 35665

Modified:
   data/CVE/list
Log:
new libv8 issue
RH NFU


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-24 05:05:29 UTC (rev 35664)
+++ data/CVE/list	2015-07-24 06:30:35 UTC (rev 35665)
@@ -37,7 +37,8 @@
 CVE-2015-5606
 	RESERVED
 CVE-2015-5605 (The regular-expression implementation in Google V8, as used in Google ...)
-	TODO: check
+	- libv8 <unfixed> (unimportant)
+	NOTE: libv8 not covered by security support
 CVE-2015-5604
 	RESERVED
 CVE-2015-5603
@@ -21195,7 +21196,7 @@
 	- linux 3.16.7-1
 	NOTE: Upstream commit: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d
 CVE-2014-7968 (VDSM allows remote attackers to cause a denial of service (connection ...)
-	NOT-FOR-US: Red Hat vdms
+	NOT-FOR-US: Red Hat vdsm
 CVE-2014-7967 (Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, ...)
 	- libv8 <removed>
 	[wheezy] - libv8 <no-dsa> (Minor issue, Chromium in Wheezy uses its own fixed copy)
@@ -49302,6 +49303,7 @@
 	RESERVED
 CVE-2013-4280
 	RESERVED
+	NOT-FOR-US: Red Hat vdsm
 CVE-2013-4279 (imapsync 1.564 and earlier performs a release check by default, which ...)
 	- imapsync <removed>
 CVE-2013-4278 (The "create an instance" API in OpenStack Compute (Nova) Folsom, ...)
@@ -49469,7 +49471,7 @@
 	NOTE: http://sourceware.org/bugzilla/show_bug.cgi?id=14699
 	NOTE: http://sourceware.org/ml/libc-alpha/2013-05/msg00445.html
 CVE-2013-4236 (VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged ...)
-	NOT-FOR-US: Red Hat vdms
+	NOT-FOR-US: Red Hat vdsm
 	NOTE: for incomplete fix for CVE-2013-0167
 CVE-2013-4235 [TOCTOU race conditions by copying and removing directory trees]
 	RESERVED