[Secure-testing-commits] r20857 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2013-01-08 21:51:04 +0000 (Tue, 08 Jan 2013)
New Revision: 20857

Modified:
   data/CVE/list
Log:
CVE-2013-0156 rails bug reported. also updated CVE-2013-0155

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-08 21:40:15 UTC (rev 20856)
+++ data/CVE/list	2013-01-08 21:51:04 UTC (rev 20857)
@@ -1708,10 +1708,13 @@
 	NOTE: CVE request http://www.openwall.com/lists/oss-security/2013/01/06/1
 CVE-2013-0156
 	RESERVED
-	- rails <unfixed>
+	- rails <unfixed> (bug #697722; high)
 	NOTE: http://www.insinuator.net/2013/01/rails-yaml/
+	NOTE: http://www.openwall.com/lists/oss-security/2013/01/08/14
 CVE-2013-0155
 	RESERVED
+	- rails <unfixed>
+	NOTE: http://www.openwall.com/lists/oss-security/2013/01/08/13
 CVE-2013-0154
 	RESERVED
 	- xen <not-affected> (Only applies to Xen 4.2, which is only available in experimental)