[Secure-testing-commits] r32919 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-16 15:58:46 +0000 (Mon, 16 Mar 2015)
New Revision: 32919

Modified:
   data/CVE/list
Log:
Mark CVE-2015-2285 as not-affected for upstart version in Debian

The vulnerable cron.daily script ist not (yet) present in Debian's
upstart as per version 1.11-5 in unstable.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-16 15:49:52 UTC (rev 32918)
+++ data/CVE/list	2015-03-16 15:58:46 UTC (rev 32919)
@@ -57,7 +57,7 @@
 CVE-2015-2286
 	RESERVED
 CVE-2015-2285 (The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart ...)
-	TODO: check
+	- upstart <not-affected> (Vulnerable cron.daily script not present)
 CVE-2014-9701 [XSS issue in MantisBT permalink_page.php]
 	- mantis <removed>
 	[wheezy] - mantis <no-dsa> (Minor issue)