[Secure-testing-commits] r30079 - data/CVE

Sat Nov 15 19:07:54 UTC 2014

Author: carnil
Date: 2014-11-15 19:07:54 +0000 (Sat, 15 Nov 2014)
New Revision: 30079

Modified:
   data/CVE/list
Log:
Actually reference the correct fix for mantis

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-11-15 19:03:51 UTC (rev 30078)
+++ data/CVE/list	2014-11-15 19:07:54 UTC (rev 30079)
@@ -5,7 +5,7 @@
 CVE-2014-XXXX [Cross-Site Scripting in adm_config_report.php]
 	- mantis <not-affected> (Vulnerable code introduced later)
 	NOTE: Affected upstream versions >= 1.2.13, <= 1.2.17
-	NOTE: https://github.com/mantisbt/mantisbt/commit/ee8100d6
+	NOTE: https://github.com/mantisbt/mantisbt/commit/49c3d089
 	NOTE: http://www.mantisbt.org/bugs/view.php?id=17870
 CVE-2014-XXXX [archives are created with read permissions for everyone]
 	- sosreport 3.2-2 (bug #769521)


