[Secure-testing-commits] r30105 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-11-17 21:01:49 +0000 (Mon, 17 Nov 2014)
New Revision: 30105

Modified:
   data/CVE/list
Log:
Add additional note for CVE-2013-1888/python-pip

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-17 20:52:51 UTC (rev 30104)
+++ data/CVE/list	2014-11-17 21:01:49 UTC (rev 30105)
@@ -36325,6 +36325,7 @@
 	- python-pip <not-affected>
 	[squeeze] - python-pip <not-affected>
 	NOTE: https://github.com/pypa/pip/pull/780/files
+	NOTE: Not-affected as vulnerable code only in 1.3, and 1.3.1-1 fixed the issue.
 CVE-2013-1887 (Multiple cross-site scripting (XSS) vulnerabilities in the Views ...)
 	- drupal6 <not-affected> (only affects 7.x-3.x to 7.x-3.6)
 	- drupal7 <not-affected> (views module not packaged)