[Secure-testing-commits] r26176 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Mar 19 13:28:44 UTC 2014


Author: carnil
Date: 2014-03-19 13:28:44 +0000 (Wed, 19 Mar 2014)
New Revision: 26176

Modified:
   data/CVE/list
Log:
Add temporary item for ruby-rack-ssl

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-03-19 13:25:00 UTC (rev 26175)
+++ data/CVE/list	2014-03-19 13:28:44 UTC (rev 26176)
@@ -1,3 +1,6 @@
+CVE-2014-XXXX [XSS in error page]
+	- ruby-rack-ssl <unfixed>
+	NOTE: https://github.com/josh/rack-ssl/commit/9d7d7300b907e496db68d89d07fbc2e0df0b487b
 CVE-2014-2528 [Apostrophes not properly escaped]
 	- k4dirstat 2.7.5-1 (bug #741659)
 	- kdirstat <removed>




More information about the Secure-testing-commits mailing list