[Secure-testing-commits] r34545 - in data: CVE DLA

[Raphaël Hertzog]

Author: hertzog
Date: 2015-05-27 14:39:51 +0000 (Wed, 27 May 2015)
New Revision: 34545

Modified:
   data/CVE/list
   data/DLA/list
Log:
Mark CVE-2011-5320 as fixed by DLA-165-1

The patch for this issue (debian/patches/any/cvs-vfscanf.diff) was added in
the corresponding upload (2.11.3-4+deb6u5).

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-27 13:41:48 UTC (rev 34544)
+++ data/CVE/list	2015-05-27 14:39:51 UTC (rev 34545)
@@ -5495,6 +5495,7 @@
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/02/26/5
 CVE-2011-5320 [glibc scanf implementation crashes on certain inputs]
 	RESERVED
+	{DLA-165-1}
 	- glibc 2.15
 	- eglibc 2.15
 	NOTE: 2.15 ist the first version recieving the fix, mark with upstream version which should

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2015-05-27 13:41:48 UTC (rev 34544)
+++ data/DLA/list	2015-05-27 14:39:51 UTC (rev 34545)
@@ -193,7 +193,7 @@
 	{CVE-2015-2304}
 	[squeeze] - libarchive 2.8.4.forreal-1+squeeze3
 [06 Mar 2015] DLA-165-1 eglibc - security update
-	{CVE-2012-3405 CVE-2012-3406 CVE-2012-3480 CVE-2012-4412 CVE-2012-4424 CVE-2013-0242 CVE-2013-1914 CVE-2013-4237 CVE-2013-4332 CVE-2013-4357 CVE-2013-4458 CVE-2013-4788 CVE-2013-7423 CVE-2013-7424 CVE-2014-4043 CVE-2015-1472 CVE-2015-1473}
+	{CVE-2011-5320 CVE-2012-3405 CVE-2012-3406 CVE-2012-3480 CVE-2012-4412 CVE-2012-4424 CVE-2013-0242 CVE-2013-1914 CVE-2013-4237 CVE-2013-4332 CVE-2013-4357 CVE-2013-4458 CVE-2013-4788 CVE-2013-7423 CVE-2013-7424 CVE-2014-4043 CVE-2015-1472 CVE-2015-1473}
 	[squeeze] - eglibc 2.11.3-4+deb6u5
 [03 Mar 2015] DLA-164-1 unace - security update
 	{CVE-2015-2063}