[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

dbus for LTS



Hi,

according to the security tracker there are three CVEs[1] for dbus which shall all affect Squeeze (DSA-2971-1).

As far as I understand CVE-2014-3532 is for kernels above 2.6.37-rc4 but only 2.6.32 is in Squeeze. The code that will be patched for CVE-2014-3533 is not available in Squeeze.
So only CVE-2014-3477 remains which is marked as no-dsa.

Can somebody please confirm this?

  Thorsten

[1] CVE-2014-3477, CVE-2014-3532, CVE-2014-3533


Reply to: