[Secure-testing-commits] r16838 - data/CVE

Luciano Bello
Thu, 23 Jun 2011 03:23:35 -0000

Author: luciano
Date: 2011-06-23 03:23:35 +0000 (Thu, 23 Jun 2011)
New Revision: 16838

Modified:
   data/CVE/list
Log:
opie issues

Modified: data/CVE/list
==================================================================---
data/CVE/list	2011-06-22 15:08:00 UTC (rev 16837)
+++ data/CVE/list	2011-06-23 03:23:35 UTC (rev 16838)
@@ -707,6 +707,12 @@
 	RESERVED
 CVE-2011-2176
 	RESERVED
+CVE-2011-XXXX [opie: off by one in opiesu]
+	- opie <unfixed> (bug #631344)
+	TODO: check severity
+CVE-2011-XXXX [opie: missing setuid() retval check in opielogin]
+	- opie <unfixed> (bug #631345)
+	TODO: check severity
 CVE-2011-2167 (script-login in Dovecot 2.0.x before 2.0.13 does not follow the
chroot ...)
 	TODO: check
 CVE-2011-2166 (script-login in Dovecot 2.0.x before 2.0.13 does not follow the
user ...)