[Secure-testing-commits] r37098 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-10-13 14:09:32 +0000 (Tue, 13 Oct 2015)
New Revision: 37098

Modified:
   data/CVE/list
Log:
glibc, git no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-13 14:01:06 UTC (rev 37097)
+++ data/CVE/list	2015-10-13 14:09:32 UTC (rev 37098)
@@ -259,6 +259,9 @@
 	NOT-FOR-US: ARM Mali GPU driver
 CVE-2015-XXXX [arbitrary code execution issues via URLs]
 	- git 1:2.6.1-1
+	[squeeze] - git <no-dsa> (Minor issue)
+	[wheezy] - git <no-dsa> (Minor issue)
+	[jessie] - git <no-dsa> (Minor issue)
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/10/06/1
 CVE-2015-7747 [When changing both sample format and number of channels, data gets corrupted; if new sample format smaller than old, possible buffer overflow]
 	RESERVED
@@ -2350,7 +2353,9 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2015/09/06/2
 CVE-2015-XXXX [Glibc Pointer guarding weakness]
 	- glibc <unfixed>
+	[jessie] - glibc <no-dsa> (Minor issue)
 	- eglibc <removed>
+	[wheezy] - eglibc <no-dsa> (Minor issue)
 	[squeeze] - eglibc 2.11.3-4+deb6u7
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/09/05/8
 	NOTE: Upstream bug https://sourceware.org/bugzilla/show_bug.cgi?id=18928