[Secure-testing-commits] r33147 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-25 20:42:55 +0000 (Wed, 25 Mar 2015)
New Revision: 33147

Modified:
   data/CVE/list
Log:
One CVE assigned for realmd, one pending

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-25 19:12:34 UTC (rev 33146)
+++ data/CVE/list	2015-03-25 20:42:55 UTC (rev 33147)
@@ -1,9 +1,10 @@
-CVE-2015-XXXX [code execution/auth bypass]
+CVE-2015-XXXX [Don't try to do join without authentication unless explicitly requested]
 	- realmd <unfixed> (bug #781179)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=89205
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/25/6
+CVE-2015-2704 [Retrieve info destined for config files after join]
+	- realmd <unfixed> (bug #781179)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=89207
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/25/6
-	TODO: check
 CVE-2015-XXXX [Multiple vulnerabilities]
 	[experimental] - freexl 1.0.1-1~exp1
 	- freexl <unfixed>