[Secure-testing-commits] r30686 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Dec 12 05:40:17 UTC 2014


Author: carnil
Date: 2014-12-12 05:40:17 +0000 (Fri, 12 Dec 2014)
New Revision: 30686

Modified:
   data/CVE/list
Log:
Add docker issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-12 05:26:51 UTC (rev 30685)
+++ data/CVE/list	2014-12-12 05:40:17 UTC (rev 30686)
@@ -10,12 +10,15 @@
 	TODO: check
 CVE-2014-9359
 	RESERVED
-CVE-2014-9358
+CVE-2014-9358 [Path traversal and spoofing opportunities presented through image identifiers]
 	RESERVED
-CVE-2014-9357
+	- docker.io <unfixed>
+CVE-2014-9357 [Escalation of privileges during decompression of LZMA (.xz) archives]
 	RESERVED
-CVE-2014-9356
+	- docker.io <unfixed>
+CVE-2014-9356 [Path traversal during processing of absolute symlinks]
 	RESERVED
+	- docker.io <unfixed>
 CVE-2014-9355
 	RESERVED
 CVE-2014-9354




More information about the Secure-testing-commits mailing list