[Secure-testing-commits] r55701 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-12 20:44:42 +0000 (Tue, 12 Sep 2017)
New Revision: 55701

Modified:
   data/CVE/list
Log:
Update status for CVE-2017-14312

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-12 19:33:51 UTC (rev 55700)
+++ data/CVE/list	2017-09-12 20:44:42 UTC (rev 55701)
@@ -78,8 +78,9 @@
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/2835184bfb78
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/448/
 CVE-2017-14312 (Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root ...)
-	- nagios3 <removed>
+	- nagios3 <not-affected> (Doesn't affect Nagios as packaged in Debian)
 	NOTE: https://github.com/NagiosEnterprises/nagioscore/issues/424
+	NOTE: State is not fully correct, since "affected" source would be there.
 CVE-2015-9228 (In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for ...)
 	NOT-FOR-US: Photocrati NextGEN Gallery plugin for WordPress
 CVE-2017-XXXX [XSA 235]