data/CVE/list

@@ -190149,6 +190149,7 @@ CVE-2014-1878 (Stack-based buffer overflow in the cmd_submitf function in cgi/cm
 	- icinga 1.10.3-1
 	- nagios3 <removed> (bug #823721)
 	[jessie] - nagios3 <no-dsa> (Minor issue)
+	NOTE: Fixed by https://github.com/Icinga/icinga-core/commit/eedf4f7d88cdc50843572224eb38a2f5c78a2dc5
 CVE-2014-1873
 	RESERVED
 CVE-2014-1872
@@ -194301,6 +194302,8 @@ CVE-2013-7205 (Off-by-one error in the process_cgivars function in ...)
 	[squeeze] - nagios3 <no-dsa> (Minor issue)
 	[wheezy] - nagios3 <no-dsa> (Minor issue)
 	NOTE: additional changed files for nagios3, cf. CVE-2013-7108
+	NOTE: Fixed by https://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/
+	NOTE: See also https://github.com/Icinga/icinga-core/issues/1399
 CVE-2013-7203 (gitolite before commit fa06a34 might allow local users to read ...)
 	- gitolite3 3.5.3.1-1
 	NOTE: http://marc.info/?l=oss-security&m=138783069700756&w=2
@@ -194459,6 +194462,7 @@ CVE-2013-7108 (Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earli
 	[wheezy] - nagios3 <no-dsa> (Minor issue)
 	NOTE: https://dev.icinga.org/issues/5251
 	NOTE: separate CVE requested for nagios, http://www.openwall.com/lists/oss-security/2013/12/23/4
+	NOTE: Fixed by https://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/
 CVE-2013-7107 (Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga ...)
 	{DSA-2956-1}
 	- icinga 1.10.2-1 (low)