[Secure-testing-commits] r28982 - in data: CVE DSA

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Sep 23 16:06:06 UTC 2014


Author: carnil
Date: 2014-09-23 16:06:06 +0000 (Tue, 23 Sep 2014)
New Revision: 28982

Modified:
   data/CVE/list
   data/DSA/list
Log:
Prepare for apt update, reserve DSA number

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-23 14:25:36 UTC (rev 28981)
+++ data/CVE/list	2014-09-23 16:06:06 UTC (rev 28982)
@@ -1846,8 +1846,9 @@
 	- git-annex 5.20140919
 	[wheezy] - git-annex <not-affected> (Vulnerable code introduced in 3.20121126)
 	NOTE: https://git-annex.branchable.com/upgrades/insecure_embedded_creds/
-CVE-2014-6273
+CVE-2014-6273 [buffer overflow in http apt method]
 	RESERVED
+	- apt 1.0.3
 CVE-2014-6272
 	RESERVED
 CVE-2014-6271

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2014-09-23 14:25:36 UTC (rev 28981)
+++ data/DSA/list	2014-09-23 16:06:06 UTC (rev 28982)
@@ -1,3 +1,6 @@
+[23 Sep 2014] DSA-3031-1 apt - security update
+	{CVE-2014-6273}
+	[wheezy] - apt 0.9.7.9+deb7u5
 [20 Sep 2014] DSA-3030-1 mantis - security update
 	{CVE-2014-1608 CVE-2014-1609}
 	[wheezy] - mantis 1.2.11-1.2+deb7u1




More information about the Secure-testing-commits mailing list