[Secure-testing-commits] r22282 - data/CVE

[Nico Golde]

Author: nion
Date: 2013-05-16 09:30:14 +0000 (Thu, 16 May 2013)
New Revision: 22282

Modified:
   data/CVE/list
Log:
yet another keystone issue (CVE-2013-2014)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-16 09:14:26 UTC (rev 22281)
+++ data/CVE/list	2013-05-16 09:30:14 UTC (rev 22282)
@@ -3487,8 +3487,8 @@
 	- linux-2.6 <removed> (low)
 CVE-2013-2014 [no limitation for requests and headers size which can cause a crash]
 	RESERVED
-	- keystone <unfixed>
-	TODO: check
+	- keystone <unfixed> (bug #708515)
+	NOTE: fixed in 2013.1-1 for experimental
 CVE-2013-2013 [OpenStack keystone password disclosure on command line]
 	RESERVED
 	- python-keystoneclient <unfixed>