[Secure-testing-commits] r39988 - data/CVE

Sat Feb 27 11:09:26 UTC 2016

Author: pabs
Date: 2016-02-27 11:09:26 +0000 (Sat, 27 Feb 2016)
New Revision: 39988

Modified:
   data/CVE/list
Log:
CVE-2015-4130: nodejs ungit: not in Debian

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-02-27 11:06:14 UTC (rev 39987)
+++ data/CVE/list	2016-02-27 11:09:26 UTC (rev 39988)
@@ -20179,8 +20179,11 @@
 	NOT-FOR-US: Aruba Networks CPPM
 CVE-2015-4131
 	RESERVED
-CVE-2015-4130
+CVE-2015-4130 [command-injection]
 	RESERVED
+	NOT-FOR-US: NodeJS ungit
+	NOTE: https://github.com/FredrikNoren/ungit/issues/486
+	NOTE: https://nodesecurity.io/advisories/40
 CVE-2015-4129 (SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote ...)
 	NOT-FOR-US: Subrion CMS
 CVE-2015-4128


