[Secure-testing-commits] r34715 - data/CVE

security tracker role sectracker at moszumanska.debian.org
Thu Jun 4 09:10:59 UTC 2015


Author: sectracker
Date: 2015-06-04 09:10:59 +0000 (Thu, 04 Jun 2015)
New Revision: 34715

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-04 08:49:24 UTC (rev 34714)
+++ data/CVE/list	2015-06-04 09:10:59 UTC (rev 34715)
@@ -10895,7 +10895,7 @@
 CVE-2014-9463
 	RESERVED
 CVE-2014-9462 (The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows ...)
-	{DSA-3257-1}
+	{DSA-3257-1 DLA-237-1}
 	- mercurial 3.4-1 (bug #783237)
 	NOTE: http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html
 	NOTE: http://selenic.com/hg/rev/e3f30068d2eb
@@ -11907,6 +11907,7 @@
 	NOTE: Upstream fix: https://git.kernel.org/linus/f54e18f1b831c92f6512d2eedb224cd63d607d3d (v3.19-rc1)
 CVE-2014-9390 [arbitrary command execution vulnerability on case-insensitive file systems]
 	RESERVED
+	{DLA-237-1}
 	- git 1:2.1.4-1
 	[wheezy] - git <no-dsa> (Minor issue)
 	[squeeze] - git <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list