[Secure-testing-commits] r29656 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Oct 26 09:23:50 UTC 2014


Author: carnil
Date: 2014-10-26 09:23:50 +0000 (Sun, 26 Oct 2014)
New Revision: 29656

Modified:
   data/CVE/list
Log:
Add temporary item for kexec-tools unsafe use of /tmp

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-26 09:19:12 UTC (rev 29655)
+++ data/CVE/list	2014-10-26 09:23:50 UTC (rev 29656)
@@ -1,3 +1,7 @@
+CVE-2014-XXXX [unsafe use of flag file in /tmp]
+	- kexec-tools <unfixed> (bug #766772)
+	[wheezy] - kexec-tools <no-dsa> (Minor issue)
+	[squeeze] - kexec-tools <not-affected> (coldreboot script not present)
 CVE-2010-XXXX [insecure handling of /tmp files in debian/preinst]
 	- riece 8.0.0-1.3 (bug #601325)
 	[wheezy] - riece <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list