[Secure-testing-commits] r31643 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Jan 24 18:18:28 UTC 2015


Author: carnil
Date: 2015-01-24 18:18:28 +0000 (Sat, 24 Jan 2015)
New Revision: 31643

Modified:
   data/CVE/list
Log:
Update CVE entries for patch issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-24 16:41:56 UTC (rev 31642)
+++ data/CVE/list	2015-01-24 18:18:28 UTC (rev 31643)
@@ -1,6 +1,6 @@
 
 CVE-2015-XXXX [directory traversal via file rename]
-	- patch <unfixed> (bug #775873)
+	- patch 2.7.3-1 (bug #775873)
 	[wheezy] - patch <not-affected> (Support for git-style patches added in 2.7)
 	[squeeze] - patch <not-affected> (Support for git-style patches added in 2.7)
 	NOTE: Upstream report: https://savannah.gnu.org/bugs/?44059
@@ -311,7 +311,7 @@
 	NOTE: Fixed by: https://github.com/rabbitmq/rabbitmq-management/commit/b5a5fc31bd49ad821a655ea9e2fe920d670a62ad
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/01/21/13
 CVE-2015-XXXX [(another) directory traversal via symlinks -- incomplete fix for CVE-2015-1196]
-	- patch <unfixed> (bug #775901)
+	- patch 2.7.3-1 (bug #775901)
 	[wheezy] - patch <not-affected> (Not affected by CVE-2015-1196 and no incomplete fix applied)
 	[squeeze] - patch <not-affected>  (Not affected by CVE-2015-1196 and no incomplete fix applied)
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/01/24/3




More information about the Secure-testing-commits mailing list