[Secure-testing-commits] r31845 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jan 30 08:13:41 UTC 2015


Author: carnil
Date: 2015-01-30 08:13:40 +0000 (Fri, 30 Jan 2015)
New Revision: 31845

Modified:
   data/CVE/list
Log:
Add symlink directory traversal issue in unrar-nofree, #774171

NOTE: not supported, but we tracked earlier already unrar-nonfree in
tracker. Add corresponding note.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-30 08:10:20 UTC (rev 31844)
+++ data/CVE/list	2015-01-30 08:13:40 UTC (rev 31845)
@@ -1,4 +1,7 @@
 CVE-2015-XXXX [symlink directory traversal]
+	- unrar-nonfree (bug #774171)
+	NOTE: Non-free not supported
+CVE-2015-XXXX [symlink directory traversal]
 	- rar <unfixed> (bug #774172)
 CVE-2015-XXXX [regular expression denial of service]
 	- node-marked <unfixed> (unimportant)




More information about the Secure-testing-commits mailing list