From f6d3c1809ae2ce2b6071189679e3f0abe3f48b58 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 19 Mar 2020 22:41:26 +0100
Subject: Reference reported upstream issue for CVE-2014-2875

---
 data/CVE/2014.list | 1 +
 1 file changed, 1 insertion(+)

(limited to 'data/CVE/2014.list')

diff --git a/data/CVE/2014.list b/data/CVE/2014.list
index f7aa50b6a1..04cf8ed10f 100644
--- a/data/CVE/2014.list
+++ b/data/CVE/2014.list
@@ -19575,6 +19575,7 @@ CVE-2014-2876
 	RESERVED
 CVE-2014-2875 (The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses wea ...)
 	- lua-cgi <unfixed> (bug #953037)
+	NOTE: https://github.com/keplerproject/cgilua/issues/17
 CVE-2014-XXXX [Insecure default permissions for ~/.virtualenvs and scripts]
 	- virtualenvwrapper 4.3-1 (low; bug #745580)
 	[wheezy] - virtualenvwrapper <no-dsa> (Minor issue)
-- 
cgit v1.2.3