Author: alteholz
Date: 2014-06-26 17:15:18 +0000 (Thu, 26 Jun 2014)
New Revision: 27461
Modified:
data/CVE/list
Log:
Add fixed versions for lxml
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-06-26 11:04:36 UTC (rev 27460)
+++ data/CVE/list 2014-06-26 17:15:18 UTC (rev 27461)
@@ -3351,6 +3351,8 @@
CVE-2014-3146 (Incomplete blacklist vulnerability in the lxml.html.clean
module in ...)
{DSA-2941-1}
- lxml 3.3.5-1 (bug #746812)
+ [wheezy] - 2.3.2-1+deb7u1
+ [squeeze] - 2.2.8-2+deb6u1
NOTE: http://lxml.de/3.3/changes-3.3.5.html
NOTE: http://seclists.org/fulldisclosure/2014/Apr/210
NOTE:
https://github.com/lxml/lxml/commit/e86b294f1f81b899a59925123560ff924a72f1cc
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
