[Secure-testing-commits] r21727 - data/CVE

Henri Salo fgeek-guest at alioth.debian.org
Sun Mar 24 12:13:06 UTC 2013


Author: fgeek-guest
Date: 2013-03-24 12:13:06 +0000 (Sun, 24 Mar 2013)
New Revision: 21727

Modified:
   data/CVE/list
Log:
CVE-2013-1888 sid/squeeze not affected. Uses e.g. /tmp/pip-TPS2s9-record/ and ./build directories.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-24 08:21:44 UTC (rev 21726)
+++ data/CVE/list	2013-03-24 12:13:06 UTC (rev 21727)
@@ -1642,9 +1642,9 @@
 	TODO: check
 CVE-2013-1888 [Insecure temporary directory handling /tmp/pip-build]
 	RESERVED
-	- python-pip <unfixed>
+	- python-pip <not-affected>
+	[squeeze] - python-pip <not-affected>
 	NOTE: https://github.com/pypa/pip/pull/780/files
-	TODO: check
 CVE-2013-1887
 	RESERVED
 CVE-2013-1886




More information about the Secure-testing-commits mailing list