[Secure-testing-commits] r42883 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-06-29 15:25:19 +0000 (Wed, 29 Jun 2016)
New Revision: 42883

Modified:
   data/CVE/list
Log:
Add more information for CVE-2014-4038

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-29 14:47:13 UTC (rev 42882)
+++ data/CVE/list	2016-06-29 15:25:19 UTC (rev 42883)
@@ -57992,6 +57992,8 @@
 	- ppc64-diag <unfixed>
 CVE-2014-4038 (ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a ...)
 	- ppc64-diag <unfixed>
+	NOTE: Issue partially fixed in 2.7.1-1, but not all parts fixed
+	NOTE: SuSE Patch covering all three items: https://bugzilla.novell.com/attachment.cgi?id=599147
 CVE-2014-4037 (Cross-site scripting (XSS) vulnerability in ...)
 	- fckeditor <removed> (low; bug #752873)
 	[wheezy] - fckeditor <no-dsa> (Minor issue)