[Secure-testing-commits] r24454 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Nov 26 19:53:55 UTC 2013


Author: carnil
Date: 2013-11-26 19:53:54 +0000 (Tue, 26 Nov 2013)
New Revision: 24454

Modified:
   data/CVE/list
Log:
Add entry for CVE-2013-4558/subversion

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-11-26 18:07:02 UTC (rev 24453)
+++ data/CVE/list	2013-11-26 19:53:54 UTC (rev 24454)
@@ -5265,8 +5265,12 @@
 CVE-2013-4559 (lighttpd before 1.4.33 does not check the return value of the (1) ...)
 	{DSA-2795-1}
 	- lighttpd 1.4.33-1+nmu1 (bug #729453)
-CVE-2013-4558
+CVE-2013-4558 [mod_dav_svn assertion when handling certain requests with autoversioning enabled]
 	RESERVED
+	- subversion <unfixed>
+	[squeeze] - subversion <not-affected> (Only affects 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4)
+	[wheezy] - subversion <not-affected> (Only affects 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4)
+	NOTE: http://subversion.apache.org/security/CVE-2013-4558-advisory.txt
 CVE-2013-4557 (The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 ...)
 	{DSA-2794-1}
 	- spip 2.1.24-1 (bug #729172)




More information about the Secure-testing-commits mailing list