[Secure-testing-commits] r25098 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jan 8 07:22:13 UTC 2014


Author: carnil
Date: 2014-01-08 07:22:13 +0000 (Wed, 08 Jan 2014)
New Revision: 25098

Modified:
   data/CVE/list
Log:
CVE-2013-7262, mapserver, from external check, add upstream bugreference

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-08 06:46:25 UTC (rev 25097)
+++ data/CVE/list	2014-01-08 07:22:13 UTC (rev 25098)
@@ -410,7 +410,8 @@
 	NOTE: upstream fix: https://git.kernel.org/linus/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c
 	NOTE: included in https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
 CVE-2013-7262 (SQL injection vulnerability in the msPostGISLayerSetTimeFilter ...)
-	TODO: check
+	- mapserver <unfixed>
+	NOTE: https://github.com/mapserver/mapserver/issues/4834
 CVE-2013-7261
 	RESERVED
 CVE-2013-7260 (Multiple stack-based buffer overflows in RealNetworks RealPlayer ...)




More information about the Secure-testing-commits mailing list