[Secure-testing-commits] r11370 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2009-03-10 17:25:56 +0000 (Tue, 10 Mar 2009)
New Revision: 11370

Modified:
   data/CVE/list
Log:
CVE-2009-0854: dash not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-10 15:22:14 UTC (rev 11369)
+++ data/CVE/list	2009-03-10 17:25:56 UTC (rev 11370)
@@ -1,3 +1,5 @@
+CVE-2009-0854 [dash: runs login scripts from the current directory]
+	- dash <not-affected> (Debian uses upstream's patch to implement -l)
 CVE-2009-0835 (The __secure_computing function in kernel/seccomp.c in the seccomp ...)
 	TODO: check
 CVE-2009-0834 (The audit_syscall_entry function in the Linux kernel 2.6.28.7 and ...)