[Secure-testing-commits] r29428 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2014-10-16 09:14:17 +0000 (Thu, 16 Oct 2014)
New Revision: 29428

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-16 09:10:16 UTC (rev 29427)
+++ data/CVE/list	2014-10-16 09:14:17 UTC (rev 29428)
@@ -10468,6 +10468,7 @@
 	RESERVED
 CVE-2014-3686 [action script execution vulnerability]
 	RESERVED
+	{DSA-3052-1}
 	- wpasupplicant <removed>
 	- hostapd <removed>
 	[squeeze] - hostapd <not-affected> (Vulnerable code not present in 0.6.10)
@@ -10803,6 +10804,7 @@
 CVE-2014-3582
 	RESERVED
 CVE-2014-3581 (The cache_merge_headers_out function in modules/cache/cache_util.c in ...)
+	{DLA-71-1}
 	- apache2 2.4.10-3
 CVE-2014-3580
 	RESERVED
@@ -24545,6 +24547,7 @@
 	NOTE: Upstream commit: https://github.com/SpiderLabs/ModSecurity/commit/f8d441cd25172fdfe5b613442fedfc0da3cc333d
 	NOTE: http://martin.swende.se/blog/HTTPChunked.html
 CVE-2013-5704 (The mod_headers module in the Apache HTTP Server 2.2.22 allows remote ...)
+	{DLA-71-1}
 	- apache2 2.4.10-2 (medium)
 	NOTE: http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2
 	NOTE: Patch for 2.4.x at: https://github.com/apache/httpd/commit/bd34b9d92894b7fc01810fc11a059fa30067e431#diff-381c180d963fb4507c77d80edb208224