[Secure-testing-commits] r24013 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-10-16 06:07:46 +0000 (Wed, 16 Oct 2013)
New Revision: 24013

Modified:
   data/CVE/list
Log:
Add four mahara CVEs (to be checked affected versions)

raphael might already have done and know more already

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-16 06:03:34 UTC (rev 24012)
+++ data/CVE/list	2013-10-16 06:07:46 UTC (rev 24013)
@@ -3575,12 +3575,24 @@
 	RESERVED
 CVE-2013-4432
 	RESERVED
-CVE-2013-4431
+	- mahara <unfixed>
+	NOTE: https://bazaar.launchpad.net/~mahara-release/mahara/1.7_STABLE/revision/5831
+	TODO: check
+CVE-2013-4431 [Not checking ownership of blocks before editing them]
 	RESERVED
+	- mahara <unfixed>
+	NOTE: https://bazaar.launchpad.net/~mahara-release/mahara/1.7_STABLE/revision/5832
+	TODO: check
 CVE-2013-4430
+	- mahara <unfixed>
+	NOTE: https://bazaar.launchpad.net/~mahara-release/mahara/1.7_STABLE/revision/5830
+	TODO: check
 	RESERVED
-CVE-2013-4429
+CVE-2013-4429 [Arbitrary image download]
 	RESERVED
+	- mahara <unfixed>
+	NOTE: https://bazaar.launchpad.net/~mahara-release/mahara/1.7_STABLE/revision/5833
+	TODO: check
 CVE-2013-4428
 	RESERVED
 CVE-2013-4427 [pyxtrlock Incorrect return value checking]