Author: fgeek-guest
Date: 2014-12-04 20:18:47 +0000 (Thu, 04 Dec 2014)
New Revision: 30549
Modified:
data/CVE/list
Log:
CVE-2014-9278
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-12-04 20:16:48 UTC (rev 30548)
+++ data/CVE/list 2014-12-04 20:18:47 UTC (rev 30549)
@@ -125,6 +125,10 @@
- unrtf <unfixed>
NOTE: https://lists.gnu.org/archive/html/bug-unrtf/2014-11/msg00000.html
TODO: check
+CVE-2014-9278 [~/.k5users unexpectedly grants remote login]
+ - openssh <not-affected> (patch not applied to Debian)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1169843
+ NOTE: Patch https://bugzilla.mindrot.org/show_bug.cgi?id=1867 from not
applied in Debian
CVE-2014-9277 [<cross-domain-policy> mangling allows injection in API
format=php]
- mediawiki <unfixed>
[squeeze] - mediawiki <end-of-life>
@@ -443,10 +447,6 @@
- linux 2.6.38-1
- linux-2.6 2.6.38-1
NOTE:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fc3a9157d314
(v2.6.38-rc1)
-CVE-2014-XXXX [~/.k5users unexpectedly grants remote login]
- - openssh <not-affected> (patch not applied to Debian)
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1169843
- NOTE: Patch https://bugzilla.mindrot.org/show_bug.cgi?id=1867 from not
applied in Debian
CVE-2014-9156 (The FileField module 6.x-3.x before 6.x-3.13 for Drupal does
not ...)
NOT-FOR-US: Drupal module FileField
CVE-2014-9129
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
