[Secure-testing-commits] r38982 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-17 13:48:57 +0000 (Sun, 17 Jan 2016)
New Revision: 38982

Modified:
   data/CVE/list
Log:
Update information for gosa issues according to maintainer info

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-17 13:39:32 UTC (rev 38981)
+++ data/CVE/list	2016-01-17 13:48:57 UTC (rev 38982)
@@ -441,9 +441,8 @@
 CVE-2016-1712
 	RESERVED
 CVE-2015-8771 [Possibility of code injection when setting passwords for Samba]
-	- gosa <unfixed>
+	- gosa 2.7.4+reloaded2-6
 	NOTE: https://github.com/gosa-project/gosa-core/commit/a67a047cba2cdae8bccb0f0e2bc6d3eb45cfcbc8
-	TODO: check
 CVE-2015-8770 [remote code execution / path traversal]
 	RESERVED
 	- roundcube 1.1.4+dfsg.1-1
@@ -1734,9 +1733,9 @@
 	NOTE: https://github.com/htacg/tidy-html5/issues/341
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/03/4
 CVE-2014-9760 [XSS vulnerability during session log on]
-	- gosa <unfixed>
+	- gosa 2.7.4+reloaded1-5
+	NOTE: Fixed in 2.7.4+reloaded1-3 with follow-up fix in 2.7.4+reloaded1-5
 	NOTE: https://github.com/gosa-project/gosa-core/commit/e35b990464a2c2cf64d6833a217ed944876e7732
-	TODO: check
 CVE-2014-9759 [MantisBT SOAP API can be used to disclose confidential settings]
 	RESERVED
 	- mantis <not-affected> (Affects >= 1.3.0-beta.1)