[Secure-testing-commits] r21368 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Thu Feb 21 20:40:10 UTC 2013


Author: carnil
Date: 2013-02-21 20:40:09 +0000 (Thu, 21 Feb 2013)
New Revision: 21368

Modified:
   data/CVE/list
Log:
add note on possible small regression caused by the patch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-02-21 19:52:24 UTC (rev 21367)
+++ data/CVE/list	2013-02-21 20:40:09 UTC (rev 21368)
@@ -5020,6 +5020,7 @@
 	- squid 2.7.STABLE9-2
 	NOTE: squid-cgi was removed in 2.7.STABLE9-2
 	- squid3 3.1.20-2.1 (bug #696187)
+	NOTE: possible regression, see #701123
 CVE-2013-0191 [pam-pgsql NULL password handling issue]
 	RESERVED
 	- pam-pgsql 0.7.3.1-4 (bug #698241)
@@ -7223,6 +7224,7 @@
 	- squid 2.7.STABLE9-2
 	NOTE: squid-cgi was removed in 2.7.STABLE9-2
 	- squid3 3.1.20-2.1 (bug #696187)
+	NOTE: possible regression, see #701123
 CVE-2012-5642 (server/action.py in Fail2ban before 0.8.8 does not properly handle the ...)
 	- fail2ban 0.8.6-3wheezy1 (low; bug #696184)
 	[squeeze] - fail2ban <not-affected> (Introduced in 0.8.6, see #696187)




More information about the Secure-testing-commits mailing list