[Secure-testing-commits] r46706 - data/CVE

[Sebastien Delafond]

Author: seb
Date: 2016-12-02 13:55:11 +0000 (Fri, 02 Dec 2016)
New Revision: 46706

Modified:
   data/CVE/list
Log:
Add tomcat8 issues for #845385 and #845393

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-02 13:27:30 UTC (rev 46705)
+++ data/CVE/list	2016-12-02 13:55:11 UTC (rev 46706)
@@ -998,6 +998,12 @@
 	RESERVED
 CVE-2017-0381
 	RESERVED
+CVE-2016-XXXX [tomcat8: privilege escalation during package removal]
+        - tomcat8 <unfixed> (bug #845385)
+	NOTE: CVE request: http://www.openwall.com/lists/oss-security/2016/12/02/5
+CVE-2016-XXXX [tomcat8: privilege escalation during package upgrade]
+        - tomcat8 <unfixed> (bug #845393)
+	NOTE: CVE request: http://www.openwall.com/lists/oss-security/2016/12/02/5
 CVE-2016-XXXX [kvm: out of bounds memory access via vcpu_id]
 	- linux <unfixed>
 	[jessie] - linux <not-affected> (Vulnerable code introduced later)