Author: anarcat
Date: 2016-05-03 15:46:55 +0000 (Tue, 03 May 2016)
New Revision: 41384
Modified:
data/CVE/list
Log:
two more NFUs for PMA and atheme in LTS
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-05-03 15:35:07 UTC (rev 41383)
+++ data/CVE/list 2016-05-03 15:46:55 UTC (rev 41384)
@@ -124,6 +124,7 @@
RESERVED
CVE-2014-9773 [A remote attacker could change Atheme's behavior by
registering/dropping certain accounts/nicks]
- atheme-services <unfixed>
+ [wheezy] - atheme-services <not-affected> (Vulnerable code introduced
later)
[jessie] - atheme-services <not-affected> (Vulnerable code introduced
later)
NOTE: https://github.com/atheme/atheme/issues/397
NOTE: Fixed by:
https://github.com/atheme/atheme/commit/c597156adc60a45b5f827793cd420945f47bc03b
@@ -6904,6 +6905,7 @@
CVE-2016-2042 (phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows
remote ...)
- phpmyadmin 4:4.5.4-1
[squeeze] - phpmyadmin <not-affected> (vulnerable code not present)
+ [wheezy] - phpmyadmin <not-affected> (vulnerable code not present)
NOTE: introduced as part of the CVE-2016-2039 fix
NOTE: https://www.phpmyadmin.net/security/PMASA-2016-6/
CVE-2016-2041 (libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13,
4.4.x ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
