[Secure-testing-commits] r41363 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-03 05:47:27 +0000 (Tue, 03 May 2016)
New Revision: 41363

Modified:
   data/CVE/list
Log:
CVEs assigned for atheme-services

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-03 05:31:54 UTC (rev 41362)
+++ data/CVE/list	2016-05-03 05:47:27 UTC (rev 41363)
@@ -116,15 +116,17 @@
 	RESERVED
 CVE-2016-4350
 	RESERVED
-CVE-2016-XXXX [A remote attacker could change Atheme's behavior by registering/dropping certain accounts/nicks]
+CVE-2014-9773 [A remote attacker could change Atheme's behavior by registering/dropping certain accounts/nicks]
 	- atheme-services <unfixed>
 	NOTE: https://github.com/atheme/atheme/issues/397
 	NOTE: https://github.com/atheme/atheme/commit/c597156adc60a45b5f827793cd420945f47bc03b
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/05/02/2
-CVE-2016-XXXX [denial of service due to a buffer overflow in the XMLRPC response encoding code]
+	NOTE: http://www.openwall.com/lists/oss-security/2016/05/02/2
+	TODO: check
+CVE-2016-4478 [denial of service due to a buffer overflow in the XMLRPC response encoding code]
 	- atheme-services <unfixed>
 	NOTE: https://github.com/atheme/atheme/commit/87580d767868360d2fed503980129504da84b63e
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/05/02/2
+	NOTE: http://www.openwall.com/lists/oss-security/2016/05/02/2
+	TODO: check
 CVE-2016-4425 [stack exhaustion parsing a JSON file]
 	- jansson <unfixed> (bug #823238)
 	NOTE: https://github.com/akheron/jansson/issues/282