[Secure-testing-commits] r26442 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2014-04-05 21:14:10 +0000 (Sat, 05 Apr 2014)
New Revision: 26442

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-05 17:03:32 UTC (rev 26441)
+++ data/CVE/list	2014-04-05 21:14:10 UTC (rev 26442)
@@ -216,6 +216,7 @@
 	- postfixadmin 2.3.5-3
 	NOTE: http://sourceforge.net/p/postfixadmin/code/1650
 CVE-2014-2653 (The verify_host_key function in sshconnect.c in the client in OpenSSH ...)
+	{DSA-2894-1}
 	- openssh 1:6.6p1-1 (low; bug #742513)
 CVE-2014-2652
 	RESERVED
@@ -551,6 +552,7 @@
 	[wheezy] - xen <not-affected> (Only exploitable with Linux >= 3.12)
 	[squeeze] - xen <not-affected> (Only exploitable with Linux >= 3.12)
 CVE-2014-2532 (sshd in OpenSSH before 6.6 does not properly support wildcards on ...)
+	{DSA-2894-1}
 	- openssh 1:6.6p1-1
 	NOTE: Default sshd_config in Debian has AcceptEnv LANG LC_*
 	NOTE: http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2