[Secure-testing-commits] r29180 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-10-01 07:13:20 +0000 (Wed, 01 Oct 2014)
New Revision: 29180

Modified:
   data/CVE/list
Log:
Added CVE-2014-7230 and CVE-2014-7231 from external check but left TODO item

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-01 05:51:55 UTC (rev 29179)
+++ data/CVE/list	2014-10-01 07:13:20 UTC (rev 29180)
@@ -4,6 +4,16 @@
 	TODO: check
 CVE-2010-XXXX [execute code from imported modules / documentation missmatch ]
 	- pylint <unfixed> (bug #591676)
+CVE-2014-7231
+	- python-oslo.utils <unfixed>
+	NOTE: https://launchpad.net/bugs/1345233
+	TODO: check
+CVE-2014-7230
+	- cinder <unfixed>
+	- nova <unfixed>
+	- trove <unfixed>
+	NOTE: https://launchpad.net/bugs/1343604
+	TODO: check
 CVE-2014-7205 [Arbitrary JavaScript Execution in Bassmaster]
 	NOTE: https://nodesecurity.io/advisories/bassmaster_js_injection
 	TODO: check