[Secure-testing-commits] r25363 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jan 24 21:37:37 UTC 2014


Author: carnil
Date: 2014-01-24 21:37:37 +0000 (Fri, 24 Jan 2014)
New Revision: 25363

Modified:
   data/CVE/list
Log:
Add fixed version for CVE-2013-6889/rush

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-24 20:38:31 UTC (rev 25362)
+++ data/CVE/list	2014-01-24 21:37:37 UTC (rev 25363)
@@ -4224,7 +4224,7 @@
 	- denyhosts 2.6-10.1
 CVE-2013-6889 [Allows reading arbitrary files]
 	RESERVED
-	- rush <unfixed> (bug #733505)
+	- rush 1.7+dfsg-4 (bug #733505)
 	[wheezy] - rush <no-dsa> (Minor issue, can be fixed through a point release update)
 CVE-2013-6888 (Uscan in devscripts before 2.13.9 allows remote attackers to execute ...)
 	{DSA-2836-1}




More information about the Secure-testing-commits mailing list