[Secure-testing-commits] r9911 - data/CVE

Wed Oct 1 12:08:43 UTC 2008

Author: white
Date: 2008-10-01 12:08:41 +0000 (Wed, 01 Oct 2008)
New Revision: 9911

Modified:
   data/CVE/list
Log:
new mercurial issue reported to BTS

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2008-10-01 11:47:20 UTC (rev 9910)
+++ data/CVE/list	2008-10-01 12:08:41 UTC (rev 9911)
@@ -135,7 +135,8 @@
 CVE-2008-4299 (A certain ActiveX control in the Microsoft Internet Authentication ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-4297 (Mercurial before 1.0.2 does not enforce the allowpull permission ...)
-	TODO: check
+	- mercurial <unfixed> (bug #500781)
+	NOTE: https://issues.rpath.com/browse/RPL-2753
 CVE-2008-4296 (The Cisco Linksys WRT350N with firmware 1.0.3.7 has &quot;admin&quot; as its ...)
 	NOT-FOR-US: Cisco Linksys WRT350N
 CVE-2008-4295 (Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices ...)


