[Secure-testing-commits] r25667 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Tue Feb 11 06:28:35 UTC 2014
Author: carnil
Date: 2014-02-11 06:28:35 +0000 (Tue, 11 Feb 2014)
New Revision: 25667
Modified:
data/CVE/list
Log:
Add CVE-2014-1935/9base
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-02-11 06:26:47 UTC (rev 25666)
+++ data/CVE/list 2014-02-11 06:28:35 UTC (rev 25667)
@@ -3,6 +3,8 @@
[wheezy] - oath-toolkit <no-dsa> (Minor issue)
NOTE: http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00000.html
NOTE: possible patch: http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/txtUm85v7Wqcy.txt
+CVE-2014-1935 [insecure use of /tmp]
+ - 9base <unfixed> (bug #737206)
CVE-2014-1934 [insecure use of /tmp]
- eyed3 <unfixed> (bug #737062)
CVE-2014-1933 [sensitive filename information on commandline visible]
More information about the Secure-testing-commits
mailing list