[Secure-testing-commits] r32192 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Feb 12 17:56:35 UTC 2015


Author: carnil
Date: 2015-02-12 17:56:35 +0000 (Thu, 12 Feb 2015)
New Revision: 32192

Modified:
   data/CVE/list
Log:
CVE assigned for sudo, #772707

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-12 17:55:00 UTC (rev 32191)
+++ data/CVE/list	2015-02-12 17:56:35 UTC (rev 32192)
@@ -293,13 +293,12 @@
 	[wheezy] - suricata <no-dsa> (Minor issue)
 	[squeeze] - suricata <no-dsa> (Minor issue)
 	NOTE: https://redmine.openinfosecfoundation.org/issues/1364
-CVE-2014-XXXX [preserves TZ by default]
+CVE-2014-9680 [preserves TZ by default]
 	- sudo <unfixed> (bug #772707)
 	NOTE: http://www.openwall.com/lists/oss-security/2014/10/15/24
 	NOTE: http://www.sudo.ws/repos/sudo/rev/33b545d19c03
 	NOTE: http://www.sudo.ws/repos/sudo/rev/579b02f0dbe0
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/02/09/12
-	NOTE: Uclear, if CVE should be assigned to sudo according to http://www.openwall.com/lists/oss-security/2015/02/11/2
+	NOTE: http://www.openwall.com/lists/oss-security/2015/02/09/12
 CVE-2014-XXXX [Stringprep calls leak random memory]
 	- jabberd2 <unfixed>
 	NOTE: https://github.com/jabberd2/jabberd2/issues/85




More information about the Secure-testing-commits mailing list