[Secure-testing-commits] r40790 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-04-07 05:51:12 +0000 (Thu, 07 Apr 2016)
New Revision: 40790

Modified:
   data/CVE/list
Log:
Add (hopefully) clarifying note for CVE-2014-1949, thanks pabs and sarnold

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-07 05:45:28 UTC (rev 40789)
+++ data/CVE/list	2016-04-07 05:51:12 UTC (rev 40790)
@@ -57155,6 +57155,8 @@
 	- cinnamon 2.2.14-1 (bug #738828)
 	NOTE: http://www.openwall.com/lists/oss-security/2014/02/12/7
 	NOTE: https://git.gnome.org/browse/gtk+/commit/?id=1691bb741d50c90ee938f0b73fe81b0ca9bfd6d4
+	NOTE: The CVE was originally assigned specifically for cinnamon-screensaver, but the underlying fix lies in gtk+3.0
+	NOTE: and later MITRE assigned the CVE to GTK+ 3.10.9 and later, see official MITRE CVE description.
 CVE-2014-1948 (OpenStack Image Registry and Delivery Service (Glance) 2013.2 through ...)
 	- glance 2013.2.2-1 (bug #738924)
 	[wheezy] - glance <not-affected> (Only affects Havana)