[Secure-testing-commits] r25670 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Feb 11 06:37:25 UTC 2014


Author: carnil
Date: 2014-02-11 06:37:24 +0000 (Tue, 11 Feb 2014)
New Revision: 25670

Modified:
   data/CVE/list
Log:
Add CVE-2014-1938/python-rply

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-11 06:32:59 UTC (rev 25669)
+++ data/CVE/list	2014-02-11 06:37:24 UTC (rev 25670)
@@ -3,6 +3,9 @@
 	[wheezy] - oath-toolkit <no-dsa> (Minor issue)
 	NOTE: http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00000.html
 	NOTE: possible patch: http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/txtUm85v7Wqcy.txt
+CVE-2014-1938 [insecure use of /tmp]
+	- python-rply <unfixed> (bug #737627)
+	NOTE: this CVE is for the insecure use of /tmp as followup for CVE-2014-1604
 CVE-2014-1937 [insecure use of /tmp]
 	- gamera <unfixed> (bug #737324)
 CVE-2014-1936 [insecure use of /tmp]




More information about the Secure-testing-commits mailing list