[Secure-testing-commits] r29256 - data/CVE

[Thijs Kinkhorst]

Author: thijs
Date: 2014-10-04 07:56:05 +0000 (Sat, 04 Oct 2014)
New Revision: 29256

Modified:
   data/CVE/list
Log:
thttpd issue squeeze-only


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-04 07:55:01 UTC (rev 29255)
+++ data/CVE/list	2014-10-04 07:56:05 UTC (rev 29256)
@@ -37284,7 +37284,9 @@
 	- linux 3.2.39-1
 	- linux-2.6 <removed>
 CVE-2013-0348 (thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use ...)
-	NOT-FOR-US: sthttpd
+	- thttpd <removed> (low)
+	[squeeze] - thttpd <unfixed>
+	NOTE: http://blogs.gentoo.org/blueness/2014/10/03/sthttpd-a-very-tiny-and-very-fast-http-server-with-a-mature-codebase/
 CVE-2013-0347 [webfs world-readable logdir]
 	RESERVED
 	- webfs 1.21+ds1-9 (low; bug #701638)