[Secure-testing-commits] r49975 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-23 19:53:32 +0000 (Thu, 23 Mar 2017)
New Revision: 49975

Modified:
   data/CVE/list
Log:
Add CVE-2016-9605

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-23 19:14:13 UTC (rev 49974)
+++ data/CVE/list	2017-03-23 19:53:32 UTC (rev 49975)
@@ -17923,8 +17923,12 @@
 	RESERVED
 CVE-2016-9606
 	RESERVED
-CVE-2016-9605
+CVE-2016-9605 [Cross site scripting in profile page]
 	RESERVED
+	- cobbler <undetermined>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1433950
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1399333
+	TODO: check, possibly introduced in 2.8, at least according to Red Hat triage
 CVE-2016-9604
 	RESERVED
 CVE-2016-9603 [cirrus: heap buffer overflow via vnc connection]