[Secure-testing-commits] r28426 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Fri Aug 22 11:55:18 UTC 2014
Author: carnil
Date: 2014-08-22 11:55:18 +0000 (Fri, 22 Aug 2014)
New Revision: 28426
Modified:
data/CVE/list
Log:
Update status for check-mk
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-08-22 11:55:11 UTC (rev 28425)
+++ data/CVE/list 2014-08-22 11:55:18 UTC (rev 28426)
@@ -84,11 +84,13 @@
CVE-2014-5340 [Code executing due to insecure input handling]
RESERVED
- check-mk <unfixed>
+ [wheezy] - check-mk <not-affected> (does not use pickle, vulnerable code not present)
NOTE: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=192d41525502dc8de10ac99f57bd988450c17566
NOTE: introduces incompatible changes to older versions, see https://bugzilla.redhat.com/show_bug.cgi?id=1132337#c2
CVE-2014-5339 [Write access to config (.mk) files in arbitrary places on the filesystem]
RESERVED
- check-mk <unfixed>
+ [wheezy] - check-mk <not-affected> (Vulnerable code not present)
NOTE: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=7998aa4d53d2fef7302c0761b9c8f47e2f626e18
CVE-2014-5338 [Reflected Cross-Site Scripting (XSS)]
RESERVED
More information about the Secure-testing-commits
mailing list