[Secure-testing-commits] r26745 - data/CVE

[Raphael Geissert]

Author: atomo64-guest
Date: 2014-04-29 12:18:30 +0000 (Tue, 29 Apr 2014)
New Revision: 26745

Modified:
   data/CVE/list
Log:
two struts issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-29 10:31:22 UTC (rev 26744)
+++ data/CVE/list	2014-04-29 12:18:30 UTC (rev 26745)
@@ -7851,8 +7851,14 @@
 	RESERVED
 CVE-2014-0113
 	RESERVED
+	- libstruts1.2-java <unfixed>
+	TODO: check
+	NOTE: https://struts.apache.org/release/2.3.x/docs/s2-021.html
 CVE-2014-0112
 	RESERVED
+	- libstruts1.2-java <unfixed>
+	TODO: check
+	NOTE: https://struts.apache.org/release/2.3.x/docs/s2-021.html
 CVE-2014-0111 (Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote ...)
 	NOT-FOR-US: Apache Syncope
 CVE-2014-0110