[Secure-testing-commits] r22008 - in data: CVE DSA

Thijs Kinkhorst thijs at alioth.debian.org
Sat Apr 20 15:03:01 UTC 2013


Author: thijs
Date: 2013-04-20 15:03:01 +0000 (Sat, 20 Apr 2013)
New Revision: 22008

Modified:
   data/CVE/list
   data/DSA/list
Log:
sudo CVE-2013-1776 split


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-04-20 14:55:14 UTC (rev 22007)
+++ data/CVE/list	2013-04-20 15:03:01 UTC (rev 22008)
@@ -867,9 +867,9 @@
 CVE-2013-2778 (Cross-site request forgery (CSRF) vulnerability in ...)
 	NOT-FOR-US: PHP Address Book
 CVE-2013-2777 (sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets ...)
-	TODO: check
+	- sudo 1.8.5p2-1+nmu1 (bug #701839)
 CVE-2013-2776 (sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on ...)
-	TODO: check
+	- sudo 1.8.5p2-1+nmu1 (bug #701839)
 CVE-2013-2775
 	RESERVED
 CVE-2013-2774

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2013-04-20 14:55:14 UTC (rev 22007)
+++ data/DSA/list	2013-04-20 15:03:01 UTC (rev 22008)
@@ -59,7 +59,7 @@
 	{CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654 CVE-2013-1655 CVE-2013-2274 CVE-2013-2275}
 	[squeeze] - puppet 2.6.2-5+squeeze7
 [09 Mar 2013] DSA-2642-1 sudo - several issues
-	{CVE-2013-1775 CVE-2013-1776}
+	{CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-2777}
 	[squeeze] - sudo 1.7.4p4-2.squeeze.4
 [09 Mar 2013] DSA-2641-1 perl - rehashing flaw
 	{CVE-2013-1667}




More information about the Secure-testing-commits mailing list