[Secure-testing-commits] r31950 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 4 06:04:36 UTC 2015


Author: carnil
Date: 2015-02-04 06:04:36 +0000 (Wed, 04 Feb 2015)
New Revision: 31950

Modified:
   data/CVE/list
Log:
Add CVE-2013-2027 from external check

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-04 05:38:40 UTC (rev 31949)
+++ data/CVE/list	2015-02-04 06:04:36 UTC (rev 31950)
@@ -42539,8 +42539,10 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2013/04/30/8
 CVE-2013-2028 (The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx ...)
 	- nginx <not-affected> (Vulnerable code not present)
-CVE-2013-2027
+CVE-2013-2027 [creates executables class files with wrong permissions]
 	RESERVED
+	- jython <unfixed>
+	TODO: check
 CVE-2013-2026
 	REJECTED
 CVE-2013-2025 (Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x ...)




More information about the Secure-testing-commits mailing list