[Secure-testing-commits] r29304 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Oct 7 18:01:55 UTC 2014


Author: carnil
Date: 2014-10-07 18:01:55 +0000 (Tue, 07 Oct 2014)
New Revision: 29304

Modified:
   data/CVE/list
Log:
Three CVEs assigned for getmail4 issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-07 18:01:48 UTC (rev 29303)
+++ data/CVE/list	2014-10-07 18:01:55 UTC (rev 29304)
@@ -1184,12 +1184,15 @@
 	NOT-FOR-US: ZyXEL
 CVE-2014-7276
 	RESERVED
-CVE-2014-7275
+CVE-2014-7275 [allows POP MITM with an arbitrary certificate]
 	RESERVED
-CVE-2014-7274
+	- getmail4 4.46.0-1
+CVE-2014-7274 [allows IMAP MITM with a valid/recognized certificate for an arbitrary hostname]
 	RESERVED
-CVE-2014-7273
+	- getmail4 4.46.0-1
+CVE-2014-7273 [allows IMAP MITM with an arbitrary certificate]
 	RESERVED
+	- getmail4 4.44.0-1
 CVE-2014-7272 [multiple vulnerabilities in sddm]
 	RESERVED
 	- sddm <itp> (bug #703519)




More information about the Secure-testing-commits mailing list