[Secure-testing-commits] r54266 - data/CVE
Sebastien Delafond
seb at moszumanska.debian.org
Fri Aug 4 15:01:35 UTC 2017
Author: seb
Date: 2017-08-04 15:01:35 +0000 (Fri, 04 Aug 2017)
New Revision: 54266
Modified:
data/CVE/list
Log:
Fix most duplicate annotations in CVE/list
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-08-04 14:42:20 UTC (rev 54265)
+++ data/CVE/list 2017-08-04 15:01:35 UTC (rev 54266)
@@ -74750,7 +74750,6 @@
CVE-2015-5313 (Directory traversal vulnerability in the ...)
- libvirt 1.3.0-1 (bug #808273)
[jessie] - libvirt 1.2.9-9+deb8u2
- [jessie] - libvirt <no-dsa> (Minor issue)
[wheezy] - libvirt <not-affected> (Vulnerable code introduced later)
[squeeze] - libvirt <not-affected> (Vulnerable code introduced later)
NOTE: Fixed by: https://libvirt.org/git/?p=libvirt.git;a=commit;h=034e47c338b13a95cf02106a3af912c1c5f818d7
@@ -83663,7 +83662,6 @@
CVE-2015-XXXX [nasal scripts can ready any file]
- flightgear-data 3.0.0-3 (bug #780716)
CVE-2015-XXXX [permissive file access allowed from nasal]
- - flightgear 1.9.1-1.1
[squeeze] - flightgear 1.9.1-1.1+deb6u11
NOTE: workaround entry for DLA 318-1 until/if CVE assigned
- flightgear 3.0.0-5 (bug #780712)
@@ -106734,7 +106732,6 @@
NOT-FOR-US: JBoss Application Server
CVE-2014-3517 (api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, ...)
- nova 2014.1.1-8 (bug #755042)
- [wheezy] - nova <no-dsa> (Minor issue)
[wheezy] - nova <not-affected> (Only exploitable when used with neutron, which is not in stable)
CVE-2014-3516
RESERVED
@@ -117812,7 +117809,7 @@
- icedove 24.2.0-1
- iceape <removed>
[squeeze] - iceweasel <end-of-life>
- [wheezy] - iceape <end-of-life>
+ [wheezy] - icedove <end-of-life>
[squeeze] - icedove <end-of-life>
[squeeze] - iceape <end-of-life>
[wheezy] - iceape <end-of-life>
@@ -129079,7 +129076,6 @@
- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
CVE-2013-2415 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
- openjdk-6 <not-affected> (Only affects Java 7)
- - openjdk-6 6b27-1.12.5-1
CVE-2013-2414 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
@@ -141629,7 +141625,6 @@
- linux-2.6 <removed>
CVE-2012-4507 (The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 ...)
- claws-mail 3.8.1-2 (low; bug #690151)
- [squeeze] - claws-mail <no-dsa> (Minor issue)
[squeeze] - claws-mail 3.7.6-4+squeeze1
NOTE: http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743
NOTE: www.thewildbeast.co.uk/claws-mail/bugzilla/attachment.cgi?id=1165
@@ -156651,7 +156646,6 @@
- webkit <not-affected> (Chrome pdf plugin)
CVE-2011-3914 (The internationalization (aka i18n) functionality in Google V8, as ...)
- chromium-browser 16.0.912.63~r113337-1
- [squeeze] - chromium-browser <end-of-life>
- webkit <not-affected> (v8-i18n chrome issue)
[squeeze] - chromium-browser <not-affected>
CVE-2011-3913 (Use-after-free vulnerability in Google Chrome before 16.0.912.63 ...)
@@ -165720,7 +165714,6 @@
[lenny] - sun-java6 6.26-0lenny1
[squeeze] - sun-java6 6.26-0squeeze1
- sun-java6 6.26-1 (bug #629852)
- - sun-java6 6.26-1 (bug #629852)
- openjdk-6 6b18-1.8.9-0.1 (bug #629852)
CVE-2011-0864 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
{DSA-2358-1 DSA-2311-1}
@@ -171214,7 +171207,6 @@
CVE-2010-3492 (The asyncore module in Python before 3.2 does not properly handle ...)
- python2.7 2.7.8-11 (unimportant)
- python3.1 <removed> (unimportant)
- - python3.2 <removed> (unimportant)
- python3.2 3.4.2-1 (unimportant)
NOTE: likely fixed much earlier, but these were the versions checked
CVE-2010-3491 (The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator ...)
@@ -180635,7 +180627,6 @@
CVE-2010-1104 (Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, ...)
- zope2.10 <removed> (low)
- zope3 <removed> (low)
- - zope2.10 <removed> (low)
[lenny] - zope2.10 <no-dsa> (Minor issue)
[lenny] - zope3 <no-dsa> (Minor issue)
- zope2.11 <removed>
@@ -183555,7 +183546,6 @@
- openjdk-6 6b17~pre3-1 (medium; bug #560908)
- sun-java6 6-17-1
[lenny] - sun-java6 6-20-0lenny1
- [lenny] - sun-java6 <no-dsa> (Non-free not supported)
CVE-2009-3881 (Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, ...)
- openjdk-6 6b17~pre3-1 (medium; bug #560908)
- sun-java6 6-17-1
More information about the Secure-testing-commits
mailing list