Author: carnil
Date: 2014-05-07 04:49:36 +0000 (Wed, 07 May 2014)
New Revision: 26842
Modified:
data/CVE/list
Log:
CVE assigned for liblwp-protocol-https-perl, add comment
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-05-06 15:26:16 UTC (rev 26841)
+++ data/CVE/list 2014-05-07 04:49:36 UTC (rev 26842)
@@ -182,10 +182,11 @@
- ldns <unfixed> (low; bug #746758)
[squeeze] - ldns <no-dsa> (Minor issue)
[wheezy] - ldns <no-dsa> (Minor issue)
-CVE-2014-XXXX [HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate
verification for IO::Socket::SSL]
+CVE-2014-3230 [HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate
verification for IO::Socket::SSL]
- liblwp-protocol-https-perl <unfixed> (bug #746579)
[wheezy] - liblwp-protocol-https-perl <not-affected> (Introduced by
bcc46ce2dab53d2e2baa583f2243d6fc7d36dcc8 in 6.04)
NOTE: Introduced by
https://github.com/dagolden/lwp-protocol-https/commit/bcc46ce2dab53d2e2baa583f2243d6fc7d36dcc8
+ NOTE: CVE assignment for
https://github.com/libwww-perl/lwp-protocol-https/pull/14#issuecomment-42328818
CVE-2014-XXXX
- lxml <unfixed> (bug #746812)
NOTE: http://lxml.de/3.3/changes-3.3.5.html
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
