2015-11-13 19:11:28 +00:00
|
|
|
{
|
|
|
|
|
"aptdaemon": {
|
|
|
|
|
"CVE-2015-1323": {
|
|
|
|
|
"_comment": "Two standard cases with a non-fixed package and a fixed one.",
|
|
|
|
|
"description": "This vulnerability is not very dangerous.",
|
|
|
|
|
"debianbug": 789162,
|
|
|
|
|
"releases": {
|
|
|
|
|
"wheezy": {
|
|
|
|
|
"repositories": {
|
|
|
|
|
"jessie": "bad version"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "low**"
|
|
|
|
|
},
|
|
|
|
|
"jessie": {
|
|
|
|
|
"repositories": {
|
|
|
|
|
"jessie": "1.1.1-4"
|
|
|
|
|
},
|
|
|
|
|
"status": "open",
|
|
|
|
|
"urgency": "low**"
|
|
|
|
|
},
|
|
|
|
|
"sid": {
|
|
|
|
|
"fixed_version": "1.1.1+bzr982-1",
|
|
|
|
|
"repositories": {
|
|
|
|
|
"sid": "1.1.1+bzr982-1"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "not yet assigned"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"CVE-2003-0779": {
|
|
|
|
|
"_comment": "Just another CVE affecting the same package.",
|
|
|
|
|
"description": "But this one is very dangerous.",
|
|
|
|
|
"releases": {
|
|
|
|
|
"jessie": {
|
|
|
|
|
"fixed_version": "0.7.0",
|
|
|
|
|
"repositories": {
|
|
|
|
|
"jessie": "1:11.13.1~dfsg-2"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "high**"
|
|
|
|
|
},
|
|
|
|
|
"sid": {
|
|
|
|
|
"fixed_version": "0.7.0",
|
|
|
|
|
"repositories": {
|
|
|
|
|
"sid": "1:13.1.0~dfsg-1.1"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "high**"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"asterisk": {
|
|
|
|
|
"CVE-2013-2685": {
|
2016-01-25 19:50:48 +00:00
|
|
|
"_comment": "This CVE has a non-affected (anymore?) package.",
|
|
|
|
|
"description": "Un-affected packages.",
|
2015-11-13 19:11:28 +00:00
|
|
|
"releases": {
|
|
|
|
|
"jessie": {
|
|
|
|
|
"fixed_version": "0",
|
|
|
|
|
"repositories": {
|
|
|
|
|
"jessie": "1:11.13.1~dfsg-2"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "unimportant"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"CVE-2003-0779": {
|
|
|
|
|
"_comment": "A CVE which affect aptdaemon, and which also affects asterisk",
|
|
|
|
|
"description": "But this one is very dangerous.",
|
|
|
|
|
"releases": {
|
|
|
|
|
"jessie": {
|
|
|
|
|
"fixed_version": "0.5.56",
|
|
|
|
|
"repositories": {
|
|
|
|
|
"jessie": "1:1.17.2"
|
|
|
|
|
},
|
|
|
|
|
"status": "resolved",
|
|
|
|
|
"urgency": "high"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
