[Secure-testing-commits] r35916 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-07 06:42:48 +0000 (Fri, 07 Aug 2015)
New Revision: 35916

Modified:
   data/CVE/list
Log:
Add CVE-2015-3187/subversion

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-07 06:40:30 UTC (rev 35915)
+++ data/CVE/list	2015-08-07 06:42:48 UTC (rev 35916)
@@ -6824,8 +6824,11 @@
 CVE-2015-3188
 	RESERVED
 	NOT-FOR-US: Apache Storm
-CVE-2015-3187
+CVE-2015-3187 [svn_repos_trace_node_locations() reveals paths hidden by authz]
 	RESERVED
+	- subversion <unfixed>
+	NOTE: https://subversion.apache.org/security/CVE-2015-3187-advisory.txt
+	TODO: check older versions not mentioned in advisory
 CVE-2015-3186
 	RESERVED
 CVE-2015-3185 (The ap_some_auth_required function in server/request.c in the Apache ...)