[Secure-testing-commits] r57826 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-19 15:49:15 +0000 (Sun, 19 Nov 2017)
New Revision: 57826

Modified:
   data/CVE/list
Log:
Expand todo note for CVE-2017-15864

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-19 14:24:53 UTC (rev 57825)
+++ data/CVE/list	2017-11-19 15:49:15 UTC (rev 57826)
@@ -3195,7 +3195,7 @@
 CVE-2017-15864 (In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x ...)
 	- otrs2 <undetermined>
 	NOTE: https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/
-	TODO: check, upstream claims affects only 3.3.x series
+	TODO: check, upstream claims affects only 3.3.x series, contacted OTRS security team
 CVE-2016-10517 (networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" ...)
 	{DLA-1161-1}
 	- redis 3:3.2.7-1