[Secure-testing-commits] r31879 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-01-31 21:10:16 +0000 (Sat, 31 Jan 2015)
New Revision: 31879

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-31 20:58:12 UTC (rev 31878)
+++ data/CVE/list	2015-01-31 21:10:16 UTC (rev 31879)
@@ -7877,7 +7877,7 @@
 	- rpm 4.11.3-1.1 (bug #773101)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1168715
 CVE-2014-8117 (softmagic.c in file before 5.21 does not properly limit recursion, ...)
-	{DSA-3121-1 DLA-131-1}
+	{DSA-3121-1 DLA-145-1 DLA-131-1}
 	- file 1:5.21+15-1 (low; bug #773148)
 	- php5 5.6.4+dfsg-2
 	NOTE: https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc
@@ -22942,7 +22942,7 @@
 	[wheezy] - mp3gain <no-dsa> (Minor issue)
 	NOTE: http://sourceforge.net/p/mp3gain/bugs/36/
 CVE-2014-2270 (softmagic.c in file before 5.17 and libmagic allows context-dependent ...)
-	{DSA-2943-1 DSA-2873-1}
+	{DSA-2943-1 DSA-2873-1 DLA-145-1}
 	- file 1:5.17-1
 	NOTE: http://bugs.gw.com/view.php?id=313
 	NOTE: https://github.com/glensc/file/commit/447558595a3650db2886cd2f416ad0beba965801
@@ -23699,9 +23699,11 @@
 CVE-2014-1840 (Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB ...)
 	NOT-FOR-US: MyBB
 CVE-2014-1830 (Requests (aka python-requests) before 2.3.0 allows remote servers to ...)
+	{DSA-3146-1}
 	- requests 2.3.0-1 (bug #733108)
 	NOTE: https://github.com/kennethreitz/requests/issues/1885
 CVE-2014-1829 (Requests (aka python-requests) before 2.3.0 allows remote servers to ...)
+	{DSA-3146-1}
 	- requests 2.3.0-1 (bug #733108)
 	NOTE: https://github.com/kennethreitz/requests/issues/1885
 CVE-2014-1912 (Buffer overflow in the socket.recvfrom_into function in ...)
@@ -28609,7 +28611,7 @@
 	[wheezy] - samba <not-affected> (AD feature not present)
 	NOTE: AD-related packages removed from src:samba4 in 4.0.0~beta2+dfsg1-3.2+deb7u2
 CVE-2014-0238 (The cdf_read_property_info function in cdf.c in the Fileinfo component ...)
-	{DSA-3021-1 DSA-2943-1 DLA-27-1}
+	{DSA-3021-1 DSA-2943-1 DLA-145-1 DLA-27-1}
 	- file 1:5.19-1
 	[squeeze] - file 5.04-5+squeeze6
 	NOTE: https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
@@ -28617,7 +28619,7 @@
 	[squeeze] - php5 <no-dsa> (Minor issue, can be fixed along with a future DSA)
 	NOTE: https://bugs.php.net/bug.php?id=67327
 CVE-2014-0237 (The cdf_unpack_summary_info function in cdf.c in the Fileinfo ...)
-	{DSA-3021-1 DSA-2943-1 DLA-27-1}
+	{DSA-3021-1 DSA-2943-1 DLA-145-1 DLA-27-1}
 	- file 1:5.19-1
 	[squeeze] - file 5.04-5+squeeze6
 	NOTE: https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d