Author: corsac Date: 2014-04-30 08:29:02 +0000 (Wed, 30 Apr 2014) New Revision: 26751
Modified: data/CVE/list Log: add information from latest oss-sec batch Modified: data/CVE/list =================================================================== --- data/CVE/list 2014-04-30 07:05:05 UTC (rev 26750) +++ data/CVE/list 2014-04-30 08:29:02 UTC (rev 26751) @@ -1,5 +1,8 @@ -CVE-2013-7374 - NOT-FOR-US: indicator-datetime +CVE-2013-XXXX [buffer overflow in miniupnpc] + - miniupnpc <unfixed> + NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1085618 + NOTE: https://github.com/miniupnp/miniupnp/commit/3a87aa2f10bd7f1408e1849bdb59c41dd63a9fe9 + NOTE: http://www.openwall.com/lists/oss-security/2014/04/30/3 CVE-2014-XXXX [handle BrowseAllow directive securely] - cups-filters 1.0.53-1 NOTE: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7195 @@ -9,6 +12,8 @@ [wheezy] - cups-filters <not-affected> (vulnerable code not present) NOTE: incomplete fix was applied NOTE: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7194 +CVE-2014-3111 + NOT-FOR-US: fog cloning solution, not in Debian CVE-2014-2985 RESERVED CVE-2014-2984 @@ -305,6 +310,8 @@ - grails <itp> (bug #473213) CVE-2014-2857 (The default configuration of the Resources plugin 1.0.0 before 1.2.6 ...) - grails <itp> (bug #473213) +CVE-2013-7374 + NOT-FOR-US: indicator-datetime CVE-2013-7371 [XSS in the Sencha Labs Connect middleware] RESERVED - node-connect <not-affected> (Only applies when incomplete fix applied) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
