Author: sectracker
Date: 2016-03-23 21:10:12 +0000 (Wed, 23 Mar 2016)
New Revision: 40538
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-03-23 18:52:41 UTC (rev 40537)
+++ data/CVE/list 2016-03-23 21:10:12 UTC (rev 40538)
@@ -1660,6 +1660,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2016/03/10/7
CVE-2015-8833 [Heap use after free in Pidgin-OTR plugin]
RESERVED
+ {DSA-3528-1}
- pidgin-otr 4.0.2-1
[wheezy] - pidgin-otr <not-affected> (Vulnerable code not present)
NOTE:
https://blog.fuzzing-project.org/39-Heap-use-after-free-in-Pidgin-OTR-plugin.html
@@ -4363,7 +4364,7 @@
NOTE: libv8 is not covered by security support
NOTE:
https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/
CVE-2015-8792 (The KaxInternalBlock::ReadData function in libMatroska before
1.4.4 ...)
- {DLA-420-1}
+ {DSA-3526-1 DLA-420-1}
- libmatroska 1.4.4-1
NOTE:
http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
NOTE:
https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f
@@ -7216,7 +7217,7 @@
NOT-FOR-US: ZTE router
CVE-2015-8702 [DoS caused by PTR lookup of connecting users]
RESERVED
- {DLA-384-1}
+ {DSA-3527-1 DLA-384-1}
- inspircd 2.0.20-1
NOTE:
https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559
NOTE: http://www.inspircd.org/2015/04/16/v2019-released.html
@@ -10884,6 +10885,7 @@
NOTE: Non-exploitable on release archs due to kernel hardening
CVE-2015-8537 [Data disclosure in atom feed]
RESERVED
+ {DSA-3529-1}
- redmine 3.2.0-1 (bug #807826)
[squeeze] - redmine <not-affected> (Vulnerable code not present in
1.0.1)
[wheezy] - redmine <end-of-life> (Redmine not supported because of
rails)
@@ -10905,6 +10907,7 @@
NOTE:
https://github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0
(v5.2.14)
CVE-2015-8474 [Open Redirect vulnerability]
RESERVED
+ {DSA-3529-1}
- redmine 3.2.0-1 (bug #807272)
[squeeze] - redmine <end-of-life> (Redmine not supported because of
rails)
[wheezy] - redmine <end-of-life> (Redmine not supported because of
rails)
@@ -10916,6 +10919,7 @@
NOTE: depends on the CVE-2014-1985 fix first
CVE-2015-8473 [Issues API may disclose changeset messages that are not visible]
RESERVED
+ {DSA-3529-1}
- redmine 3.2.0-1 (bug #807345)
[squeeze] - redmine <not-affected> (code dates from the API changes
introduced in 735a83c, part of 1.1)
[wheezy] - redmine <end-of-life> (Redmine not supported because of
rails)
@@ -11346,7 +11350,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2015/11/25/3
CVE-2015-8346 [Data disclosure on the time logging form]
RESERVED
- {DLA-351-1}
+ {DSA-3529-1 DLA-351-1}
- redmine 3.2.0-1 (bug #806376)
[wheezy] - redmine <end-of-life> (Redmine not supported because of
rails)
[squeeze] - redmine <end-of-life> (Redmine not supported because of
rails)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
