[Secure-testing-commits] r30769 - data/CVE

[security tracker role]

Author: sectracker
Date: 2014-12-15 21:10:17 +0000 (Mon, 15 Dec 2014)
New Revision: 30769

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-15 20:31:55 UTC (rev 30768)
+++ data/CVE/list	2014-12-15 21:10:17 UTC (rev 30769)
@@ -934,6 +934,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2014/11/26/13
 	NOTE: https://github.com/karelzak/util-linux/commit/89e90ae7b2826110ea28c1c0eb8e7c56c3907bdc
 CVE-2014-9112 (Heap-based buffer overflow in the process_copy_in function in GNU Cpio ...)
+	{DLA-111-1}
 	- cpio <unfixed> (bug #772793)
 	NOTE: http://lcamtuf.coredump.cx/afl/vulns/lesspipe-cpio-bad-write.cpio
 	NOTE: https://savannah.gnu.org/bugs/?43709
@@ -2865,7 +2866,7 @@
 	- gdb <unfixed> (unimportant)
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7e1e19887abd24aeb15066b141cdff5541e0ec8e
 CVE-2014-8500 (ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through ...)
-	{DSA-3094-1}
+	{DSA-3094-1 DLA-112-1}
 	- bind9 1:9.9.5.dfsg-7 (bug #772610)
 	NOTE: https://kb.isc.org/article/AA-01216/0
 CVE-2014-8499 (Multiple SQL injection vulnerabilities in ManageEngine Password ...)