[Secure-testing-commits] r24692 - data/CVE

Wed Dec 11 20:56:53 UTC 2013

Author: carnil
Date: 2013-12-11 20:56:53 +0000 (Wed, 11 Dec 2013)
New Revision: 24692

Modified:
   data/CVE/list
Log:
Add CVE-2013-6391/keystone

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2013-12-11 17:51:22 UTC (rev 24691)
+++ data/CVE/list	2013-12-11 20:56:53 UTC (rev 24692)
@@ -2290,8 +2290,11 @@
 	- linux-2.6 <not-affected> (Android-specific)
 	- linux <not-affected> (Android-specific)
 	NOTE: https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c43027bdb59f03eec7ead0a01c77e4bf801625&h=jb_3.2.3
-CVE-2013-6391
+CVE-2013-6391 [Keystone trust circumvention through EC2-style tokens]
 	RESERVED
+	- keystone <unfixed>
+	NOTE: https://launchpad.net/bugs/1242597
+	TODO: check
 CVE-2013-6390
 	RESERVED
 CVE-2013-6389 (Open redirect vulnerability in the Overlay module in Drupal 7.x before ...)


