[Secure-testing-commits] r56435 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-05 16:56:31 +0000 (Thu, 05 Oct 2017)
New Revision: 56435

Modified:
   data/CVE/list
Log:
NFU
golang ignored
resolve older ceilometer TODO


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-05 16:28:22 UTC (rev 56434)
+++ data/CVE/list	2017-10-05 16:56:31 UTC (rev 56435)
@@ -130,6 +130,7 @@
 	- golang-1.8 <not-affected> (Fixed before initial release to Debian)
 	- golang-1.7 1.7.4-1
 	- golang <removed>
+	[jessie] - golang <ignored> (Minor issue)
 	NOTE: https://groups.google.com/forum/#!msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ
 	NOTE: https://golang.org/cl/30410
 	NOTE: https://golang.org/issue/17965
@@ -1176,6 +1177,7 @@
 	NOT-FOR-US: WatchGuard Fireware
 CVE-2017-14614
 	RESERVED
+	NOT-FOR-US: GridGain
 CVE-2017-14613
 	RESERVED
 CVE-2017-14612
@@ -7459,12 +7461,10 @@
 CVE-2017-12440 (Aodh as packaged in Openstack Ocata and Newton before change-ID ...)
 	{DSA-3953-1}
 	- aodh <unfixed> (bug #872605)
-	- python-ceilometerclient <undetermined>
 	NOTE: https://wiki.openstack.org/wiki/OSSN/OSSN-0080
 	NOTE: Master: https://review.openstack.org/#/c/493823/
 	NOTE: Ocata: https://review.openstack.org/#/c/493824/
 	NOTE: Newton: https://review.openstack.org/#/c/493826/
-	TODO: check, feature was previously in ceilometer
 CVE-2017-12439 (SocuSoft Flash Slideshow Maker Professional through v5.20, when the ...)
 	NOT-FOR-US: SocuSoft Flash Slideshow Maker Professional
 CVE-2017-12438