Author: carnil
Date: 2013-02-19 21:27:10 +0000 (Tue, 19 Feb 2013)
New Revision: 21345
Modified:
data/CVE/list
Log:
Correct some keystone and nova related CVEs
three CVE's where rejected and two are to be used.
TODO: notify maintainers about the CVE's to reference.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-02-19 21:20:31 UTC (rev 21344)
+++ data/CVE/list 2013-02-19 21:27:10 UTC (rev 21345)
@@ -196,17 +196,19 @@
RESERVED
CVE-2013-1666
RESERVED
-CVE-2013-1665 [Local file leak through entities in XML requests]
+CVE-2013-1665 [Information leak via xml entity parsing]
RESERVED
- keystone <unfixed>
- TODO: check
-CVE-2013-1664 [DoS through XML entity expansion]
+ TODO: check and add the bugnumbers
+ TODO: notify maintainers about the CVE rejections
+CVE-2013-1664 [Denial of service via xml entity parsing]
RESERVED
- keystone <unfixed>
- nova <unfixed>
- cinder <unfixed>
NOTE: cinder is in the NEW queue
- TODO: check
+ TODO: notify maintainers about the CVE rejections
+ TODO: check and add the bugnumbers
CVE-2012-6532 ((1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc
in ...)
TODO: check
CVE-2012-6531 ((1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend
Framework 1.x ...)
@@ -3657,15 +3659,15 @@
CVE-2013-0281 [DoS when remote CIB management enabled]
RESERVED
- pacemaker <unfixed> (bug #700923)
-CVE-2013-0280 [Information leak and Denial of Service using XML entities]
+CVE-2013-0280
RESERVED
- - keystone <unfixed> (bug #700948)
- - nova <unfixed> (bug #700949)
- TODO: check
+ NOTE: To be rejected
CVE-2013-0279
RESERVED
+ NOTE: To be rejected
CVE-2013-0278
RESERVED
+ NOTE: To be rejected
CVE-2013-0277 (Active Record in Ruby on Rails 3.x before 3.1.0 and 2.3.x
before ...)
{DSA-2620-1}
- ruby-activerecord-2.3 2.3.14-5
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
