[Secure-testing-commits] r29552 - data/CVE
Raphaël Hertzog
hertzog at moszumanska.debian.org
Tue Oct 21 09:26:23 UTC 2014
Author: hertzog
Date: 2014-10-21 09:26:23 +0000 (Tue, 21 Oct 2014)
New Revision: 29552
Modified:
data/CVE/list
Log:
Add details about CVE-2014-3660 and the upstream patch
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-10-21 09:14:10 UTC (rev 29551)
+++ data/CVE/list 2014-10-21 09:26:23 UTC (rev 29552)
@@ -10661,6 +10661,9 @@
- libxml2 <unfixed> (bug #765722)
NOTE: https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html
NOTE: https://git.gnome.org/browse/libxml2/commit/?id=be2a7edaf289c5da74a4f9ed3a0b6c733e775230
+ NOTE: Beware the upstream patch relies on other commits not
+ NOTE: available in the squeeze/wheezy version (at least cff2546f that
+ NOTE: changes how the ent->checked variable is used and likely a3f1e3e5 too)
CVE-2014-3659
REJECTED
CVE-2014-3658
More information about the Secure-testing-commits
mailing list