[Secure-testing-commits] r38231 - data/CVE

Fri Dec 11 20:06:23 UTC 2015

Author: anarcat
Date: 2015-12-11 20:06:23 +0000 (Fri, 11 Dec 2015)
New Revision: 38231

Modified:
   data/CVE/list
Log:
update status of some redmine issues

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-12-11 17:30:43 UTC (rev 38230)
+++ data/CVE/list	2015-12-11 20:06:23 UTC (rev 38231)
@@ -1597,9 +1597,11 @@
 	NOTE: commit: https://github.com/redmine/redmine/commit/032f2c9be6520d9d1a1608aa4f1d5d1f184f2472
 	NOTE: upstream fixed in 2.6.7, 3.0.5 and 3.1.1
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/04/1
+	NOTE: depends on the CVE-2014-1985 fix first
 CVE-2015-8473 [Issues API may disclose changeset messages that are not visible]
 	RESERVED
 	- redmine <unfixed> (bug #807345)
+	[squeeze] - redmine <not-affected> (code dates from the API changes introduced in 735a83c, part of 1.1)
 	NOTE: https://www.redmine.org/projects/redmine/wiki/Changelog_3_0
 	NOTE: https://www.redmine.org/issues/21136
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/03/7


