[Secure-testing-commits] r17168 - data/CVE

Michael Gilbert gilbert-guest at alioth.debian.org
Sun Sep 4 20:56:24 UTC 2011


Author: gilbert-guest
Date: 2011-09-04 20:56:23 +0000 (Sun, 04 Sep 2011)
New Revision: 17168

Modified:
   data/CVE/list
Log:
tmpfile issue is very low severity, no dsa

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-09-04 18:50:53 UTC (rev 17167)
+++ data/CVE/list	2011-09-04 20:56:23 UTC (rev 17168)
@@ -1,6 +1,10 @@
 CVE-2011-XXXX [TMPFILE environment variable exposure]
 	- debianutils <unfixed> (bug #640389)
+	[squeeze] - debianutils <no-dsa> (very esoteric attack vector)
+	[lenny] - debianutils <no-dsa> (very esoteric attack vector)
 	- coreutils <unfixed>
+	[squeeze] - coreutils <no-dsa> (very esoteric attack vector)
+	[lenny] - coreutils <no-dsa> (very esoteric attack vector)
 CVE-2011-XXXX [unescaped remote shell]
 	- bcfg2 1.1.2-2 (bug #640028)
 	NOTE: information as reported by maintainer




More information about the Secure-testing-commits mailing list