Hi,

according to the security tracker there are three CVEs[1] for dbus which shall all affect Squeeze (DSA-2971-1).

As far as I understand CVE-2014-3532 is for kernels above 2.6.37-rc4 but only 2.6.32 is in Squeeze. The code that will be patched for CVE-2014-3533 is not available in Squeeze.
So only CVE-2014-3477 remains which is marked as no-dsa.

Can somebody please confirm this?

  Thorsten

[1] CVE-2014-3477, CVE-2014-3532, CVE-2014-3533


--
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.02.1407101951140.14...@jupiter.server.alteholz.net

Reply via email to