[Secure-testing-commits] r32391 - data/CVE

[Michael Gilbert]

Author: mgilbert
Date: 2015-02-22 03:02:04 +0000 (Sun, 22 Feb 2015)
New Revision: 32391

Modified:
   data/CVE/list
Log:
document the fact that there is still ongoing work for CVE-2005-4890

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-22 02:43:31 UTC (rev 32390)
+++ data/CVE/list	2015-02-22 03:02:04 UTC (rev 32391)
@@ -1,3 +1,6 @@
+CVE-2005-XXXX [more related to CVE-2005-4890]
+	- shadow <unfixed> (unimportant; bug #628843)
+	NOTE: only affects the su executable, so if you use sudo you're not affected
 CVE-2015-XXXX [TYPO3-CORE-SA-2015-001: Authentication Bypass]
 	- typo3-src 4.5.40+dfsg1-1 (bug #778870)
 	[squeeze] - typo3-src <end-of-life> (Unsupported in squeeze-lts)