[Secure-testing-commits] r32123 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-02-10 05:42:51 +0000 (Tue, 10 Feb 2015)
New Revision: 32123

Modified:
   data/CVE/list
Log:
Add new mantis issue, not yet CVE ified

NOTE: will get probably two CVEs since reported in may 2014, then fixed,
reintroduced with other code path.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-09 21:42:13 UTC (rev 32122)
+++ data/CVE/list	2015-02-10 05:42:51 UTC (rev 32123)
@@ -1,3 +1,9 @@
+CVE-2015-XXXX [XSS]
+	- mantis <removed>
+	[squeeze] - mantis <end-of-life> (Unsupported in squeeze-lts)
+	NOTE: Upstream patch: https://github.com/mantisbt/mantisbt/commit/6defeed5 (1.2.x)
+	NOTE: https://www.mantisbt.org/bugs/view.php?id=19301
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/02/09/10
 CVE-2015-XXXX [fails to detect silent driver failure to change MAC]
 	- macchanger 1.7.0-5.3 (bug #774898)
 CVE-2015-XXXX [lame missing check for samplerate]