[Secure-testing-commits] r11825 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-05-07 01:30:35 +0000 (Thu, 07 May 2009)
New Revision: 11825

Modified:
   data/CVE/list
Log:
- potential prelude-manager issue
- tracking added for bash-completion issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-07 00:27:19 UTC (rev 11824)
+++ data/CVE/list	2009-05-07 01:30:35 UTC (rev 11825)
@@ -1,3 +1,12 @@
+CVE-2009-XXXX [prelude-manager: password world-readable]
+	- prelude-manager <unfixed> (low; bug #527344)
+	NOTE: asked maintainer to determine whether debian is affected by this one
+	NOTE: FEDORA-2009-3931 (http://lwn.net/Articles/331612)
+CVE-2009-XXXX [bash-completion: does not properly quote characters]
+	- bash-completion 200811xx~bzr1223 (bug #259987)
+	NOTE: adding this reference to track the fact that this has already been addressed by debian security
+	NOTE: fixed over a year ago in debian; but fedora finally got around to addressing the issue recently
+	NOTE: FEDORA-2009-3639 (http://lwn.net/Articles/331605)
 CVE-2009-1547
 	RESERVED
 CVE-2009-1546