[Secure-testing-commits] r33839 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-25 15:14:03 +0000 (Sat, 25 Apr 2015)
New Revision: 33839

Modified:
   data/CVE/list
Log:
Update CVE-2015-1839/salt: not-affected for jessie and sid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-25 15:07:38 UTC (rev 33838)
+++ data/CVE/list	2015-04-25 15:14:03 UTC (rev 33839)
@@ -4114,7 +4114,7 @@
 	RESERVED
 CVE-2015-1839 [insecure /tmp file handling in salt/modules/chef.py]
 	RESERVED
-	- salt <unfixed>
+	- salt <not-affected> (Vulnerable code only present in experimental version; introduced in 2014.7.0)
 	NOTE: https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c
 	NOTE: https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81
 CVE-2015-1838 [insecure /tmp file handling in salt/modules/serverdensity_device.py]