[Secure-testing-commits] r34031 - data/CVE

Sat May 2 15:11:18 UTC 2015

Author: carnil
Date: 2015-05-02 15:11:18 +0000 (Sat, 02 May 2015)
New Revision: 34031

Modified:
   data/CVE/list
Log:
Mark CVE-2014-9462 as fixed in unstable

Drop the experimental tag and mark the first version which entered
unstable with the fix.

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-05-02 15:06:14 UTC (rev 34030)
+++ data/CVE/list	2015-05-02 15:11:18 UTC (rev 34031)
@@ -8716,8 +8716,7 @@
 CVE-2014-9463
 	RESERVED
 CVE-2014-9462 (The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows ...)
-	- mercurial <unfixed> (bug #783237)
-	[experimental] - mercurial 3.3~rc1-1
+	- mercurial 3.4-1 (bug #783237)
 	NOTE: http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html
 	NOTE: http://selenic.com/hg/rev/e3f30068d2eb
 CVE-2014-9461 (Directory traversal vulnerability in models/Cart66.php in the Cart66 ...)


