[Secure-testing-commits] r38931 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-15 05:26:22 +0000 (Fri, 15 Jan 2016)
New Revision: 38931

Modified:
   data/CVE/list
Log:
Add CVE-2016-190{5,6}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-15 05:20:37 UTC (rev 38930)
+++ data/CVE/list	2016-01-15 05:26:22 UTC (rev 38931)
@@ -1,3 +1,11 @@
+CVE-2016-1906 [Kubernetes api server: build config to a strategy that isn't allowed by policy]
+	- kubernetes <itp> (bug #795652)
+	NOTE: https://github.com/openshift/origin/issues/6556
+	NOTE: https://github.com/openshift/origin/pull/6576
+CVE-2016-1905 [Kubernetes api server: patch operation should use patched object to check admission control]
+	- kubernetes <itp> (bug #795652)
+	NOTE: https://github.com/kubernetes/kubernetes/issues/19479
+	NOTE: https://github.com/kubernetes/kubernetes/pull/19481
 CVE-2016-1904 [Heap BufferOver Flow in escapeshell functions]
 	- php5 <undetermined>
 	- php5.6 <undetermined>