[Secure-testing-commits] r32150 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 11 06:22:02 UTC 2015


Author: carnil
Date: 2015-02-11 06:22:02 +0000 (Wed, 11 Feb 2015)
New Revision: 32150

Modified:
   data/CVE/list
Log:
Update entry with references and question from MITRE for sudo

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-11 06:19:30 UTC (rev 32149)
+++ data/CVE/list	2015-02-11 06:22:02 UTC (rev 32150)
@@ -279,7 +279,10 @@
 CVE-2014-XXXX [preserves TZ by default]
 	- sudo <unfixed> (bug #772707)
 	NOTE: http://www.openwall.com/lists/oss-security/2014/10/15/24
+	NOTE: http://www.sudo.ws/repos/sudo/rev/33b545d19c03
+	NOTE: http://www.sudo.ws/repos/sudo/rev/579b02f0dbe0
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/02/09/12
+	NOTE: Uclear, if CVE should be assigned to sudo according to http://www.openwall.com/lists/oss-security/2015/02/11/2
 CVE-2014-XXXX [Stringprep calls leak random memory]
 	- jabberd2 <unfixed>
 	NOTE: https://github.com/jabberd2/jabberd2/issues/85




More information about the Secure-testing-commits mailing list