[Secure-testing-commits] r48483 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-28 20:02:08 +0000 (Sat, 28 Jan 2017)
New Revision: 48483

Modified:
   data/CVE/list
Log:
Update CVE-2016-3104 with note/explanation for affected versions

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-28 19:48:15 UTC (rev 48482)
+++ data/CVE/list	2017-01-28 20:02:08 UTC (rev 48483)
@@ -34538,8 +34538,14 @@
 	NOTE: https://selenic.com/hg/rev/a56296f55a5e
 CVE-2016-3104
 	RESERVED
-	- mongodb <undetermined>
+	- mongodb 1:3.2.11-1
+	[jessie] - mongodb <no-dsa> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/SERVER-24378
+	NOTE: Marking as fixed with the first 3.x based version in unstable
+	NOTE: This issue though affect only 2.4 (and possibly older), or 2.6
+	NOTE: installations, but only in circumstances where they first had a
+	NOTE: MongoDB 2.4 installation with authentication enabled, upgraded
+	NOTE: to 2.6, and did not complete a full upgrade
 CVE-2016-3103
 	RESERVED
 CVE-2016-3102