[Secure-testing-commits] r26842 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed May 7 04:49:40 UTC 2014


Author: carnil
Date: 2014-05-07 04:49:36 +0000 (Wed, 07 May 2014)
New Revision: 26842

Modified:
   data/CVE/list
Log:
CVE assigned for liblwp-protocol-https-perl, add comment

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-05-06 15:26:16 UTC (rev 26841)
+++ data/CVE/list	2014-05-07 04:49:36 UTC (rev 26842)
@@ -182,10 +182,11 @@
 	- ldns <unfixed> (low; bug #746758)
 	[squeeze] - ldns <no-dsa> (Minor issue)
 	[wheezy] - ldns <no-dsa> (Minor issue)
-CVE-2014-XXXX [HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate verification for IO::Socket::SSL]
+CVE-2014-3230 [HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate verification for IO::Socket::SSL]
 	- liblwp-protocol-https-perl <unfixed> (bug #746579)
 	[wheezy] - liblwp-protocol-https-perl <not-affected> (Introduced by bcc46ce2dab53d2e2baa583f2243d6fc7d36dcc8 in 6.04)
 	NOTE: Introduced by https://github.com/dagolden/lwp-protocol-https/commit/bcc46ce2dab53d2e2baa583f2243d6fc7d36dcc8
+	NOTE: CVE assignment for https://github.com/libwww-perl/lwp-protocol-https/pull/14#issuecomment-42328818
 CVE-2014-XXXX
 	- lxml <unfixed> (bug #746812)
 	NOTE: http://lxml.de/3.3/changes-3.3.5.html




More information about the Secure-testing-commits mailing list