[Secure-testing-commits] r54911 - data/CVE

[Paul Mathijs Gevers]

Author: elbrus
Date: 2017-08-20 16:36:14 +0000 (Sun, 20 Aug 2017)
New Revision: 54911

Modified:
   data/CVE/list
Log:
Add additional note to cacti CVE-2017-1000031

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-20 16:29:49 UTC (rev 54910)
+++ data/CVE/list	2017-08-20 16:36:14 UTC (rev 54911)
@@ -5302,6 +5302,10 @@
 	NOTE: According to https://github.com/Cacti/cacti/issues/866#issuecomment-316865448
 	NOTE: the first issue was fixed by https://github.com/Cacti/cacti/commit/be800c9e552d2929106b576922e9693c83b4bd46
 	NOTE: whereas the second issue was fixed by https://github.com/Cacti/cacti/commit/4e4dd6784adfc07b6011da999809d86a06f0f4e5
+	NOTE: After the request to MITRE to reject this CVE, elbrus discovered that also
+	NOTE: CVE-2015-4634 seems part of the duplication. Upstream commit 4e4dd67 was in the
+	NOTE: preperation git tree for 1.x, its equivalent svn commit was used to fix
+	NOTE: CVE-2015-4634 in Debian.
 CVE-2017-1000030 (Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is ...)
 	- glassfish <not-affected> (Vulnerable code not included, see bug #853998)
 CVE-2017-1000029 (Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is ...)