[Git][security-tracker-team/security-tracker][master] Reference upstream commit for older encfs issue

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri May 19 20:58:24 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
adc59b42 by Salvatore Bonaccorso at 2023-05-19T21:57:30+02:00
Reference upstream commit for older encfs issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -497955,6 +497955,7 @@ CVE-2014-3462 (The ".encfs6.xml" configuration file in encfs before 1.7.5 allows
 	NOTE: Shortcoming documented in 1.7.4-4
 	NOTE: https://defuse.ca/audits/encfs.htm
 	NOTE: Upstream issue: https://github.com/vgough/encfs/issues/14
+	NOTE: https://github.com/vgough/encfs/commit/9d06412f1c68b0607f27f2a4434a2801fa807a2d (v1.8.1)
 CVE-2014-3453 (Eval injection vulnerability in the flag_import_form_validate function ...)
 	NOT-FOR-US: Drupal module
 CVE-2014-3444 (The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/adc59b42974aed5972446b838c4208ab6894f758

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/adc59b42974aed5972446b838c4208ab6894f758
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230519/54d0dbe9/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list