[Secure-testing-commits] r33835 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-25 14:05:00 +0000 (Sat, 25 Apr 2015)
New Revision: 33835

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-1865/coreutils

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-25 13:18:16 UTC (rev 33834)
+++ data/CVE/list	2015-04-25 14:05:00 UTC (rev 33835)
@@ -4009,10 +4009,10 @@
 	NOT-FOR-US: ember.js
 CVE-2015-1865 ["time of check to time of use" race condition fts.c]
 	RESERVED
-	- coreutils <unfixed> (low)
-	[jessie] - coreutils <no-dsa> (Minor issue)
-	[wheezy] - coreutils <no-dsa> (Minor issue)
+	- coreutils 8.13-1 (low)
 	[squeeze] - coreutils <no-dsa> (Minor issue)
+	NOTE: relevant code changed in 8.13, see https://bugzilla.redhat.com/show_bug.cgi?id=1211300 for details
+	NOTE: Issue reproduced with 8.5 but not with 8.13.
 CVE-2015-1864
 	RESERVED
 	- kallithea <itp> (bug #689573)