[Secure-testing-commits] r56167 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-26 19:43:18 +0000 (Tue, 26 Sep 2017)
New Revision: 56167

Modified:
   data/CVE/list
Log:
Add two CVEs for apache-mesos, itp'ed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-26 19:39:04 UTC (rev 56166)
+++ data/CVE/list	2017-09-26 19:43:18 UTC (rev 56167)
@@ -12189,6 +12189,7 @@
 	NOTE: Issue is specific to Struts 2.x.
 CVE-2017-9790
 	RESERVED
+	- apache-mesos <itp> (bug #760315)
 CVE-2017-9789 (When under stress, closing many connections, the HTTP/2 handling code ...)
 	- apache2 <not-affected> (Only affected 2.4.26)
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#2.4.27
@@ -20120,6 +20121,7 @@
 	NOT-FOR-US: Apache OpenMeetings
 CVE-2017-7687
 	RESERVED
+	- apache-mesos <itp> (bug #760315)
 CVE-2017-7686 (Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to ...)
 	NOT-FOR-US: Apache Ignite
 CVE-2017-7685 (Apache OpenMeetings 1.0.0 responds to the following insecure HTTP ...)