From e17fe1e5f6b37b0b67f7c879b8c0ce8ebd762f01 Mon Sep 17 00:00:00 2001 From: bdrewery Date: Thu, 25 Sep 2014 16:22:06 +0000 Subject: The 2nd bash issue was reassigned to CVE-2014-7169: http://seclists.org/oss-sec/2014/q3/685 Reported by: jkim --- security/vuxml/vuln.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'security/vuxml') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 647f6f40244d..0ed50fc1c6c9 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -224,12 +224,12 @@ Notes: definitions.

The original fix released for CVE-2014-6271 was not adequate. A - similar vulnerability was discovered and tagged as CVE-2014-3659.

+ similar vulnerability was discovered and tagged as CVE-2014-7169.

CVE-2014-6271 - CVE-2014-3659 + CVE-2014-7169 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ https://lists.gnu.org/archive/html/bug-bash/2014-09/msg00081.html http://seclists.org/oss-sec/2014/q3/690 -- cgit