[Secure-testing-commits] r24711 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Dec 12 12:21:44 UTC 2013


Author: carnil
Date: 2013-12-12 12:21:44 +0000 (Thu, 12 Dec 2013)
New Revision: 24711

Modified:
   data/CVE/list
Log:
Add item for new devscripts/uscan issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-12 11:20:35 UTC (rev 24710)
+++ data/CVE/list	2013-12-12 12:21:44 UTC (rev 24711)
@@ -1,3 +1,7 @@
+CVE-2013-XXXX [uscan: broken handling of filenames with whitespace]
+	- devscripts <unfixed> (bug #732006)
+	[wheezy] - devscripts <not-affected> (does not contain the vulnerable code; introduced in 2.13.5)
+	[squeeze] - devscripts <not-affected> (does not contain the vulnerable code; introduced in 2.13.5)
 CVE-2013-7082
 	- typo3-src <unfixed> (bug #731999)
 CVE-2013-7081




More information about the Secure-testing-commits mailing list