[Secure-testing-commits] r52021 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-05-28 11:41:06 +0000 (Sun, 28 May 2017)
New Revision: 52021

Modified:
   data/CVE/list
Log:
dolibarr bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-28 11:36:24 UTC (rev 52020)
+++ data/CVE/list	2017-05-28 11:41:06 UTC (rev 52021)
@@ -956,7 +956,7 @@
 CVE-2017-8880
 	RESERVED
 CVE-2017-8879 (Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the ...)
-	- dolibarr <unfixed>
+	- dolibarr <unfixed> (bug #863544)
 CVE-2017-8878 (ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 ...)
 	NOT-FOR-US: ASUS
 CVE-2017-8877 (ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 ...)
@@ -3573,13 +3573,13 @@
 CVE-2017-7890
 	RESERVED
 CVE-2017-7888 (Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which ...)
-	- dolibarr <unfixed>
+	- dolibarr <unfixed> (bug #863544)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/10/6
 CVE-2017-7887 (Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall ...)
-	- dolibarr <unfixed>
+	- dolibarr <unfixed> (bug #863544)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/10/6
 CVE-2017-7886 (Dolibarr ERP/CRM 4.0.4 has SQL Injection in ...)
-	- dolibarr <unfixed>
+	- dolibarr <unfixed> (bug #863544)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/10/6
 CVE-2017-7885 (Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to ...)
 	{DSA-3855-1 DLA-942-1}