[Secure-testing-commits] r25983 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Thu Mar 6 09:24:25 UTC 2014


Author: jmm
Date: 2014-03-06 09:24:24 +0000 (Thu, 06 Mar 2014)
New Revision: 25983

Modified:
   data/CVE/list
Log:
sudo no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-03-06 07:37:46 UTC (rev 25982)
+++ data/CVE/list	2014-03-06 09:24:24 UTC (rev 25983)
@@ -5630,7 +5630,8 @@
 	RESERVED
 CVE-2014-0106
 	RESERVED
-	- sudo 1.8.5p2-1
+	- sudo 1.8.5p2-1 (low)
+	[squeeze] - sudo <no-dsa> (environemnt sanitising is enabled by default and turning it off in insecure anyway)
 	NOTE: http://www.sudo.ws/sudo/alerts/env_add.html
 CVE-2014-0105
 	RESERVED




More information about the Secure-testing-commits mailing list