[Secure-testing-commits] r33754 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Apr 22 10:27:14 UTC 2015


Author: carnil
Date: 2015-04-22 10:27:14 +0000 (Wed, 22 Apr 2015)
New Revision: 33754

Modified:
   data/CVE/list
Log:
Add fixed version for curl upload to unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-22 09:11:21 UTC (rev 33753)
+++ data/CVE/list	2015-04-22 10:27:14 UTC (rev 33754)
@@ -428,7 +428,7 @@
 	- openjdk-8 <not-affected> (defective patch not applied)
 CVE-2015-3148 [Negotiate not treated as connection-oriented]
 	RESERVED
-	- curl <unfixed>
+	- curl 7.42.0-1
 	NOTE: http://curl.haxx.se/docs/adv_20150422B.html
 CVE-2015-3147
 	RESERVED
@@ -437,19 +437,19 @@
 	RESERVED
 CVE-2015-3145 [cookie parser out of boundary memory access]
 	RESERVED
-	- curl <unfixed>
+	- curl 7.42.0-1
 	[wheezy] - curl <not-affected> (Affects 7.31.0 to and including 7.41.0)
 	[squeeze] - curl <not-affected> (Affects 7.31.0 to and including 7.41.0)
 	NOTE: http://curl.haxx.se/docs/adv_20150422C.html
 CVE-2015-3144 [host name out of boundary memory access]
 	RESERVED
-	- curl <unfixed>
+	- curl 7.42.0-1
 	[wheezy] - curl <not-affected> (Affects 7.37.0 to and including 7.41.0)
 	[squeeze] - curl <not-affected> (Affects 7.37.0 to and including 7.41.0)
 	NOTE: http://curl.haxx.se/docs/adv_20150422D.html
 CVE-2015-3143 [Re-using authenticated connection when unauthenticated]
 	RESERVED
-	- curl <unfixed>
+	- curl 7.42.0-1
 	NOTE: http://curl.haxx.se/docs/adv_20150422A.html
 CVE-2015-3142
 	RESERVED




More information about the Secure-testing-commits mailing list