[Secure-testing-commits] r57478 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-09 06:20:47 +0000 (Thu, 09 Nov 2017)
New Revision: 57478

Modified:
   data/CVE/list
Log:
Add note for CVE-2017-16541

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-09 06:17:32 UTC (rev 57477)
+++ data/CVE/list	2017-11-09 06:20:47 UTC (rev 57478)
@@ -290,7 +290,9 @@
 CVE-2017-16542 (Zoho ManageEngine Applications Manager 13 allows Post-authentication ...)
 	NOT-FOR-US: Zoho
 CVE-2017-16541 (Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to ...)
-	TODO: check
+	NOTE: https://trac.torproject.org/projects/tor/ticket/24052
+	NOTE: https://blog.torproject.org/tor-browser-709-released
+	TODO: check, this is possibly just specific to the Tor Browser Bundle assigned
 CVE-2017-16540 (OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database ...)
 	NOT-FOR-US: OpenEMR
 CVE-2017-16539 (The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through ...)