[Secure-testing-commits] r34727 - data/CVE
Alessandro Ghedini
ghedo at moszumanska.debian.org
Fri Jun 5 11:18:24 UTC 2015
Author: ghedo
Date: 2015-06-05 11:18:24 +0000 (Fri, 05 Jun 2015)
New Revision: 34727
Modified:
data/CVE/list
Log:
CVE assigned for redis issue
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-06-04 21:00:57 UTC (rev 34726)
+++ data/CVE/list 2015-06-05 11:18:24 UTC (rev 34727)
@@ -1,8 +1,8 @@
-CVE-2015-XXXX [Redis EVAL Lua Sandbox Escape]
+CVE-2015-4335 [Redis EVAL Lua Sandbox Escape]
- redis 2:3.0.2-1
NOTE: http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/
NOTE: Patch: https://github.com/antirez/redis/commit/fdf9d455098f54f7666c702ae464e6ea21e25411
- NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/06/04/8
+ NOTE: http://www.openwall.com/lists/oss-security/2015/06/05/3
CVE-2015-XXXX [Null pointer access in inflatehd tool]
- nghttp2 <unfixed> (unimportant)
NOTE: Upstream report: https://github.com/tatsuhiro-t/nghttp2/issues/235
More information about the Secure-testing-commits
mailing list