[Secure-testing-commits] r32876 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-15 05:49:18 +0000 (Sun, 15 Mar 2015)
New Revision: 32876

Modified:
   data/CVE/list
Log:
Add CVE-2014-9701/mantis

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-15 05:40:24 UTC (rev 32875)
+++ data/CVE/list	2015-03-15 05:49:18 UTC (rev 32876)
@@ -6,6 +6,12 @@
 	RESERVED
 CVE-2015-2285 (The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart ...)
 	TODO: check
+CVE-2014-9701 [XSS issue in MantisBT permalink_page.php]
+	- mantis <removed>
+	[squeeze] - mantis <end-of-life> (Unsupported in squeeze-lts)
+	NOTE: Fixed by https://github.com/mantisbt/mantisbt/commit/d95f070d (1.2.x)
+	NOTE: http://article.gmane.org/gmane.comp.security.oss.general/15022
+	NOTE: https://www.mantisbt.org/bugs/view.php?id=19493
 CVE-2014-9697
 	RESERVED
 CVE-2014-9696