[Secure-testing-commits] r28427 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-08-22 12:07:23 +0000 (Fri, 22 Aug 2014)
New Revision: 28427

Modified:
   data/CVE/list
Log:
Add bug reference for check-mk

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-22 11:55:18 UTC (rev 28426)
+++ data/CVE/list	2014-08-22 12:07:23 UTC (rev 28427)
@@ -83,13 +83,13 @@
 	RESERVED
 CVE-2014-5340 [Code executing due to insecure input handling]
 	RESERVED
-	- check-mk <unfixed>
+	- check-mk <unfixed> (bug #758883)
 	[wheezy] - check-mk <not-affected> (does not use pickle, vulnerable code not present)
 	NOTE: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=192d41525502dc8de10ac99f57bd988450c17566
 	NOTE: introduces incompatible changes to older versions, see https://bugzilla.redhat.com/show_bug.cgi?id=1132337#c2
 CVE-2014-5339 [Write access to config (.mk) files in arbitrary places on the filesystem]
 	RESERVED
-	- check-mk <unfixed>
+	- check-mk <unfixed> (bug #758883)
 	[wheezy] - check-mk <not-affected>  (Vulnerable code not present)
 	NOTE: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=7998aa4d53d2fef7302c0761b9c8f47e2f626e18
 CVE-2014-5338 [Reflected Cross-Site Scripting (XSS)]