[Secure-testing-commits] r26992 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed May 21 14:50:03 UTC 2014


Author: carnil
Date: 2014-05-21 14:50:03 +0000 (Wed, 21 May 2014)
New Revision: 26992

Modified:
   data/CVE/list
Log:
Add two mod-wsgi issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-05-21 11:17:34 UTC (rev 26991)
+++ data/CVE/list	2014-05-21 14:50:03 UTC (rev 26992)
@@ -9304,12 +9304,16 @@
 	RESERVED
 CVE-2014-0243
 	RESERVED
-CVE-2014-0242
+CVE-2014-0242 [information disclosure via Content-Type response header]
 	RESERVED
+	- mod-wsgi 3.4-3
+	NOTE: https://github.com/GrahamDumpleton/mod_wsgi/commit/b0a149c1f5e569932325972e2e20176a42e43517
 CVE-2014-0241
 	RESERVED
-CVE-2014-0240
+CVE-2014-0240 [local privilege escalation when using daemon mode]
 	RESERVED
+	- mod-wsgi <unfixed>
+	NOTE: https://github.com/GrahamDumpleton/mod_wsgi/commit/d9d5fea585b23991f76532a9b07de7fcd3b649f4
 CVE-2014-0239
 	RESERVED
 CVE-2014-0238




More information about the Secure-testing-commits mailing list