[Secure-testing-commits] r43407 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-07-24 05:47:18 +0000 (Sun, 24 Jul 2016)
New Revision: 43407

Modified:
   data/CVE/list
Log:
Add reference to reported #832283

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-23 19:25:46 UTC (rev 43406)
+++ data/CVE/list	2016-07-24 05:47:18 UTC (rev 43407)
@@ -20518,9 +20518,8 @@
 	NOTE: https://launchpadlibrarian.net/228152582/dhcp.c.patch
 	NOTE: original ubuntu bug: https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226
 CVE-2015-8379 (CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to ...)
-	- cakephp <unfixed>
+	- cakephp <unfixed> (bug #832283)
 	NOTE: http://karmainsecurity.com/KIS-2016-01
-	TODO: check
 CVE-2015-8400 (The HTTPS fallback implementation in Shell In A Box (aka shellinabox) ...)
 	- shellinabox 2.19
 	[jessie] - shellinabox <no-dsa> (Minor issue)
@@ -22415,7 +22414,7 @@
 	NOTE: https://github.com/vincentbernat/lldpd/commit/793526f8884455f43daecd0a2c46772388417a00
 	NOTE: http://www.openwall.com/lists/oss-security/2015/10/18/2
 CVE-2015-XXXX [cakephp: XML class SSRF vulnerability]
-	- cakephp <unfixed>
+	- cakephp <unfixed> (bug #832283)
 	[squeeze] - cakephp 1.3.2-1.1+deb6u11
 	NOTE: Workaround entry for DLA-333-1 until/if CVE assigned
 	NOTE: http://seclists.org/fulldisclosure/2015/Oct/70