[Secure-testing-commits] r18321 - data/CVE

[Paul Wise]

Author: pabs
Date: 2012-01-28 07:59:22 +0000 (Sat, 28 Jan 2012)
New Revision: 18321

Modified:
   data/CVE/list
Log:
curl CVE-2011-3389 note

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-28 07:56:53 UTC (rev 18320)
+++ data/CVE/list	2012-01-28 07:59:22 UTC (rev 18321)
@@ -6868,6 +6868,7 @@
 	- webkit <unfixed>
 	NOTE: strictly speaking this is no lighttpd issue, but lighttpd adds a workaround
 	- curl 7.24.0-1
+	NOTE: http://curl.haxx.se/docs/adv_20120124B.html
 CVE-2011-3388 (Opera before 11.51 allows remote attackers to cause an insecure site ...)
 	NOT-FOR-US: Opera
 CVE-2011-3387 (The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote ...)