[Secure-testing-commits] r25888 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 26 05:38:16 UTC 2014


Author: carnil
Date: 2014-02-26 05:38:16 +0000 (Wed, 26 Feb 2014)
New Revision: 25888

Modified:
   data/CVE/list
Log:
One more CVE assigned for catfish

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-26 05:36:28 UTC (rev 25887)
+++ data/CVE/list	2014-02-26 05:38:16 UTC (rev 25888)
@@ -8,6 +8,10 @@
 	- file 1:5.17-0.1 (bug #703993)
 	NOTE: http://bugs.gw.com/view.php?id=164
 	NOTE: fixed in commit ef2329cf71acb59204dd981e2c6cce6c81fe467c
+CVE-2014-2096 [insecure when cwd is world-writable]
+	- catfish <unfixed> (low; bug #739958)
+	[squeeze] - catfish <no-dsa> (Minor issue)
+	[wheezy] - catfish <no-dsa> (Minor issue)
 CVE-2014-2095 [insecure when cwd is world-writable]
 	- catfish <unfixed> (low; bug #739958)
 	[squeeze] - catfish <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list