[Secure-testing-commits] r34103 - data/CVE

Thu May 7 05:34:55 UTC 2015

Author: carnil
Date: 2015-05-07 05:34:55 +0000 (Thu, 07 May 2015)
New Revision: 34103

Modified:
   data/CVE/list
Log:
Add fixed version for CVE-2015-1854/389-ds-base, #783923

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-05-07 05:02:53 UTC (rev 34102)
+++ data/CVE/list	2015-05-07 05:34:55 UTC (rev 34103)
@@ -4728,7 +4728,7 @@
 	NOTE: https://github.com/ruby/openssl/commit/e9a7bcb8bf2902f907c148a00bbcf21d3fa79596
 CVE-2015-1854 [access control bypass with modrdn]
 	RESERVED
-	- 389-ds-base <unfixed> (bug #783923)
+	- 389-ds-base 1.3.3.10-1 (bug #783923)
 	NOTE: Patch applied to CentOS package: https://git.centos.org/raw/rpms!389-ds-base.git!/309aa9ee631432d72c845f70df2ce6475055423b/SOURCES!0062-CVE-2015-1854-389ds-base-access-control-bypass-with-.patch
 CVE-2015-1853 [authentication doesn't protect symmetric associations against DoS attacks]
 	RESERVED


