[Secure-testing-commits] r51198 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-30 05:30:35 +0000 (Sun, 30 Apr 2017)
New Revision: 51198

Modified:
   data/CVE/list
Log:
Add radicale issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-29 23:41:44 UTC (rev 51197)
+++ data/CVE/list	2017-04-30 05:30:35 UTC (rev 51198)
@@ -1,3 +1,7 @@
+CVE-2017-XXXX [prone to timing oracles and simple bruteforce attacks]
+	- radicale <unfixed> (bug #861514)
+	NOTE: https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b (1.1.x)
+	NOTE: https://github.com/Kozea/Radicale/commit/059ba8dec1f22ccbeab837e288b3833a099cee2d (master)
 CVE-2017-8327 (The bmpr_read_uncompressed function in imagew-bmp.c in ...)
 	TODO: check
 CVE-2017-8326 (libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot ...)