[Secure-testing-commits] r58350 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-08 06:11:46 +0000 (Fri, 08 Dec 2017)
New Revision: 58350

Modified:
   data/CVE/list
Log:
Process CVE-2017-15097, mark as NFU, add note

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-08 05:48:14 UTC (rev 58349)
+++ data/CVE/list	2017-12-08 06:11:46 UTC (rev 58350)
@@ -9274,6 +9274,9 @@
 	[wheezy] - postgresql-9.1 <not-affected> (Vulnerable code does not exist)
 CVE-2017-15097
 	RESERVED
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1508985
+	NOTE: Similar issues as CVE-2016-1255 in Debian
+	NOT-FOR-US: Red Hat specific provides scripts for starting the database server during system boot and for initializing the database
 CVE-2017-15096 (A flaw was found in GlusterFS in versions prior to 3.10. A null ...)
 	- glusterfs 3.12.2-2 (bug #880017)
 	[stretch] - glusterfs <not-affected> (Vulnerable code introduced later)