[Secure-testing-commits] r19167 - data/CVE

Henri Salo fgeek-guest at alioth.debian.org
Tue May 8 09:04:35 UTC 2012


Author: fgeek-guest
Date: 2012-05-08 09:04:34 +0000 (Tue, 08 May 2012)
New Revision: 19167

Modified:
   data/CVE/list
Log:
Added node.js <0.6.17/0.7.8 HTTP server information disclosure.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-08 06:59:59 UTC (rev 19166)
+++ data/CVE/list	2012-05-08 09:04:34 UTC (rev 19167)
@@ -1,3 +1,7 @@
+CVE-2012-XXXX [node.js <0.6.17/0.7.8 HTTP server information disclosure]
+    TODO: check
+    NOTE: http://blog.nodejs.org/2012/05/07/http-server-security-vulnerability-please-upgrade-to-0-6-17/
+    NOTE: https://github.com/joyent/node/commit/c9a231d
 CVE-2012-2455
 	RESERVED
 CVE-2012-2454




More information about the Secure-testing-commits mailing list