[Secure-testing-commits] r35529 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jul 17 13:27:39 UTC 2015


Author: carnil
Date: 2015-07-17 13:27:39 +0000 (Fri, 17 Jul 2015)
New Revision: 35529

Modified:
   data/CVE/list
Log:
Add fixed version for elasticsearch, #792617

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-17 09:10:23 UTC (rev 35528)
+++ data/CVE/list	2015-07-17 13:27:39 UTC (rev 35529)
@@ -7,7 +7,7 @@
 CVE-2015-5524
 	RESERVED
 CVE-2015-5531 [Directory traversal vulnerability]
-	- elasticsearch <unfixed> (bug #792617)
+	- elasticsearch 1.6.1+dfsg-1 (bug #792617)
 	NOTE: https://www.elastic.co/blog/elasticsearch-1-7-0-and-1-6-1-released#security
 CVE-2015-5521 (Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows ...)
 	TODO: check
@@ -323,7 +323,7 @@
 	RESERVED
 CVE-2015-5377 [Remote code execution vulnerability]
 	RESERVED
-	- elasticsearch <unfixed> (bug #792617)
+	- elasticsearch 1.6.1+dfsg-1 (bug #792617)
 	NOTE: https://www.elastic.co/blog/elasticsearch-1-7-0-and-1-6-1-released#security
 CVE-2015-5376
 	RESERVED




More information about the Secure-testing-commits mailing list