[Secure-testing-commits] r29163 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-09-30 09:50:02 +0000 (Tue, 30 Sep 2014)
New Revision: 29163

Modified:
   data/CVE/list
Log:
Add link to patch for CVE-2013-5704/apache (for apache 2.2.x)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-30 09:01:32 UTC (rev 29162)
+++ data/CVE/list	2014-09-30 09:50:02 UTC (rev 29163)
@@ -22022,7 +22022,8 @@
 CVE-2013-5704 (The mod_headers module in the Apache HTTP Server 2.2.22 allows remote ...)
 	- apache2 2.4.10-2 (medium)
 	NOTE: http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2
-	NOTE: Patch at https://github.com/apache/httpd/commit/bd34b9d92894b7fc01810fc11a059fa30067e431#diff-381c180d963fb4507c77d80edb208224
+	NOTE: Patch for 2.4.x at: https://github.com/apache/httpd/commit/bd34b9d92894b7fc01810fc11a059fa30067e431#diff-381c180d963fb4507c77d80edb208224
+	NOTE: Patche for 2.2.x at: https://github.com/apache/httpd/commit/16e241ed9f0482acfda30b115227101744ccbc2c
 CVE-2013-5703 (The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute ...)
 	NOT-FOR-US: DrayTek Vigor 2700 router
 CVE-2013-5702 (Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in ...)