[Secure-testing-commits] r30131 - data/CVE

Tue Nov 18 15:45:42 UTC 2014

Author: hertzog
Date: 2014-11-18 15:45:42 +0000 (Tue, 18 Nov 2014)
New Revision: 30131

Modified:
   data/CVE/list
Log:
Add link to upstream patch for CVE-2012-3541/nfs-utils

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-11-18 15:45:32 UTC (rev 30130)
+++ data/CVE/list	2014-11-18 15:45:42 UTC (rev 30131)
@@ -49660,6 +49660,7 @@
 	NOTE: Upstream git repository of rpcbind: http://git.infradead.org/users/steved/rpcbind.git
 	NOTE: Based on discussion with upstream there's likely no security hole
 	NOTE: besides the information disclosure.
+	NOTE: Upstream fix for nfs-utils: http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=c7e224a75f480f955532c96937a5d58cc6e10272
 CVE-2012-3540 (Open redirect vulnerability in views/auth_forms.py in OpenStack ...)
 	- horizon 2012.1.1-4 (bug #686050)
 CVE-2012-3539


