Note where CVE-2013-6800 was fixed

CVE-2013-6800 appears to be fixed by the same patch that fixes
CVE-2013-1418, so mention the first in changelog entries that refer to
the second.
This commit is contained in:
Nalin Dahyabhai 2013-11-18 16:07:42 -05:00
parent 596d52ef7e
commit dee7ae00a4

View File

@ -1006,7 +1006,7 @@ exit 0
- update to 1.11.4
- drop patch for RT#7650, obsoleted
- drop patch for RT#7706, obsoleted as RT#7723
- drop patch for CVE-2013-1418, included in 1.11.4
- drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4
* Tue Nov 12 2013 Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-31
- switch to the simplified version of the patch for #1029110 (RT#7764)
@ -1018,7 +1018,8 @@ exit 0
* Tue Nov 5 2013 Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
- incorporate upstream patch for remote crash of KDCs which serve multiple
realms simultaneously (RT#7756, CVE-2013-1418)
realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,
#1026997/#1031501)
* Mon Nov 4 2013 Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
- drop patch to add additional access() checks to ksu - they add to breakage