[Secure-testing-commits] r32566 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-01 20:42:42 +0000 (Sun, 01 Mar 2015)
New Revision: 32566

Modified:
   data/CVE/list
Log:
Two CVEs fixed for xen, CVE-2015-1563 and CVE-2015-0361, #776319

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-01 20:41:33 UTC (rev 32565)
+++ data/CVE/list	2015-03-01 20:42:42 UTC (rev 32566)
@@ -2015,7 +2015,7 @@
 CVE-2014-9646 (Unquoted Windows search path vulnerability in the ...)
 	- chromium-browser <not-affected> (Windows specific problem for chromium-browser)
 CVE-2015-1563 (The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows ...)
-	- xen <unfixed> (low; bug #776319)
+	- xen 4.4.1-7 (low; bug #776319)
 	[wheezy] - xen <not-affected> (Only affects 4.4 and later on arm)
 	[squeeze] - xen <not-affected> (Only affects 4.4 and later on arm)
 CVE-2015-1558 (Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when ...)
@@ -5471,7 +5471,7 @@
 CVE-2015-0362 (Unspecified vulnerability in the BI Publisher (formerly XML Publisher) ...)
 	NOT-FOR-US: Oracle
 CVE-2015-0361 (Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows ...)
-	- xen <unfixed> (bug #776319)
+	- xen 4.4.1-7 (bug #776319)
 	[wheezy] - xen <not-affected> (Only affects 4.2 and later)
 	[squeeze] - xen <not-affected> (Only affects 4.2 and later)
 CVE-2014-9425 (Double free vulnerability in the zend_ts_hash_graceful_destroy ...)