[Secure-testing-commits] r26546 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-04-14 19:15:58 +0000 (Mon, 14 Apr 2014)
New Revision: 26546

Modified:
   data/CVE/list
Log:
Add CVE-2010-5298/openssl

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-14 19:01:55 UTC (rev 26545)
+++ data/CVE/list	2014-04-14 19:15:58 UTC (rev 26546)
@@ -3388,6 +3388,9 @@
 	NOTE: Only exploitable at build time
 CVE-2011-5270 (wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the ...)
 	- wordpress 3.2.1+dfsg-1
+CVE-2010-5298 [Use-after-free race condition, in OpenSSL's read buffer]
+	- openssl <unfixed>
+	TODO: check
 CVE-2010-5297 (WordPress before 3.0.1, when a Multisite installation is used, ...)
 	- wordpress 3.0.1-1
 CVE-2010-5296 (wp-includes/capabilities.php in WordPress before 3.0.2, when a ...)