[Secure-testing-commits] r55631 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-10 17:21:22 +0000 (Sun, 10 Sep 2017)
New Revision: 55631

Modified:
   data/CVE/list
Log:
Update information for CVE-2017-14230

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-10 17:07:36 UTC (rev 55630)
+++ data/CVE/list	2017-09-10 17:21:22 UTC (rev 55631)
@@ -1,9 +1,10 @@
 CVE-2017-14231 (GeniXCMS before 1.1.0 allows remote attackers to cause a denial of ...)
 	NOT-FOR-US: GenixCMS
 CVE-2017-14230 (In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP ...)
-	- cyrus-imapd <undetermined>
-	- cyrus-imapd-2.4 <undetermined>
+	- cyrus-imapd <not-affected> (Vulnerable code introduced later)
+	- cyrus-imapd-2.4 <not-affected> (Vulnerable code introduced later)
 	NOTE: Fixed by: https://github.com/cyrusimap/cyrus-imapd/commit/6bd33275368edfa71ae117de895488584678ac79
+	NOTE: Introduced by: https://github.com/cyrusimap/cyrus-imapd/commit/1fe918087237f55e09a37fa414bf988873739021 (cyrus-imapd-3.0.0-beta1)
 	NOTE: https://github.com/cyrusimap/cyrus-imapd/issues/2132
 CVE-2017-14229 (There is an infinite loop in the jpc_dec_tileinit function in ...)
 	- jasper <removed>