[Secure-testing-commits] r57908 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-21 20:54:36 +0000 (Tue, 21 Nov 2017)
New Revision: 57908

Modified:
   data/CVE/list
Log:
Add CVE-2017-16664/otrs2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-21 20:42:16 UTC (rev 57907)
+++ data/CVE/list	2017-11-21 20:54:36 UTC (rev 57908)
@@ -1012,8 +1012,12 @@
 	RESERVED
 CVE-2017-16665 (RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a ...)
 	NOT-FOR-US: RemObjects Remoting SDK
-CVE-2017-16664
+CVE-2017-16664 [OSA-2017-07]
 	RESERVED
+	- otrs2 <unfixed>
+	NOTE: https://www.otrs.com/security-advisory-2017-07-security-update-otrs-framework/
+	NOTE: OTRS 5: https://github.com/OTRS/otrs/commit/4c36932d0c42343f21246a107e17a2ebbd9c2c7d
+	NOTE: OTRS 3.3: https://github.com/OTRS/otrs/commit/2e58a4bbd99b2477d72c3b2d9fef009537ab19ce
 CVE-2017-16667 (backintime (aka Back in Time) before 1.1.24 did improper ...)
 	- backintime <unfixed> (bug #881205)
 	[wheezy] - backintime <not-affected> (Vulnerable code does not exist)