[Secure-testing-commits] r50532 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-10 15:18:06 +0000 (Mon, 10 Apr 2017)
New Revision: 50532

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2016-10321/web2py

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 14:53:32 UTC (rev 50531)
+++ data/CVE/list	2017-04-10 15:18:06 UTC (rev 50532)
@@ -36055,7 +36055,7 @@
 	NOTE: https://github.com/libarchive/libarchive/issues/705
 	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/fd7e0c02e272913a0a8b6d492c7260dfca0b1408 (v3.2.1)
 CVE-2016-10321 [does not check if host is denied before verifying passwords]
-	- web2py <unfixed>
+	- web2py <unfixed> (bug #860038)
 	[jessie] - web2py <no-dsa> (Minor issue; issue in web admin interface which has no need to be used in production)
 	NOTE: https://github.com/web2py/web2py/issues/1585#issuecomment-284317919
 	NOTE: https://github.com/web2py/web2py/commit/944d8bd8f3c5cf8ae296fc03d149056c65358426