[Secure-testing-commits] r34002 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-05-01 09:10:18 +0000 (Fri, 01 May 2015)
New Revision: 34002

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-01 08:01:16 UTC (rev 34001)
+++ data/CVE/list	2015-05-01 09:10:18 UTC (rev 34002)
@@ -5095,7 +5095,7 @@
 	NOTE: https://review.openstack.org/#/c/156553
 CVE-2015-1877 [command injection vulnerability]
 	RESERVED
-	{DSA-3165-1}
+	{DSA-3165-1 DLA-217-1}
 	- xdg-utils 1.1.0~rc1+git20111210-7.4 (bug #777722)
 CVE-2015-1568 (Cross-site request forgery (CSRF) vulnerability in the GD Infinite ...)
 	NOT-FOR-US: Drupal module GD Infinite Scroll
@@ -6225,6 +6225,7 @@
 	RESERVED
 CVE-2015-1250
 	RESERVED
+	{DSA-3242-1}
 	- chromium-browser 42.0.2311.135-1
 	[wheezy] - chromium-browser <end-of-life>
 	[squeeze] - chromium-browser <end-of-life>
@@ -6261,6 +6262,7 @@
 	[squeeze] - chromium-browser <end-of-life>
 CVE-2015-1243
 	RESERVED
+	{DSA-3242-1}
 	- chromium-browser 42.0.2311.135-1
 	[wheezy] - chromium-browser <end-of-life>
 	[squeeze] - chromium-browser <end-of-life>
@@ -11137,7 +11139,7 @@
 CVE-2015-0256
 	RESERVED
 CVE-2015-0255 (X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x ...)
-	{DSA-3160-1}
+	{DSA-3160-1 DLA-218-1}
 	- xorg-server 2:1.16.4-1
 CVE-2015-0254 (Apache Standard Taglibs before 1.2.3 allows remote attackers to ...)
 	- jakarta-taglibs-standard 1.1.2-3 (bug #779621)
@@ -12259,7 +12261,7 @@
 	NOTE: http://github.com/mantisbt/mantisbt/commit/5f0b150b
 	NOTE: http://www.mantisbt.org/bugs/view.php?id=17742
 CVE-2014-9622 (Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported ...)
-	{DSA-3131-1}
+	{DSA-3131-1 DLA-217-1}
 	- xdg-utils 1.1.0~rc1+git20111210-7.3 (bug #773085)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=66670
 CVE-2014-8991 (pip 1.3 through 1.5.6 allows local users to cause a denial of service ...)
@@ -25059,7 +25061,7 @@
 	NOTE: https://git.kernel.org/cgit/virt/kvm/kvm.git/commit/?id=8b3c3104c3f4f706e99365c3e0d2aa61b95f969f
 	NOTE: Enabling CONFIG_PARAVIRT when building the kernel mitigates this issue.
 CVE-2014-3609 (HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 ...)
-	{DSA-3139-1 DSA-3014-1 DLA-45-1}
+	{DSA-3139-1 DSA-3014-1 DLA-216-1 DLA-45-1}
 	- squid 2.7.STABLE9-5 (bug #776194)
 	- squid3 3.3.8-1.2 (bug #759509)
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2014_2.txt