Author: carnil
Date: 2016-11-05 10:24:33 +0000 (Sat, 05 Nov 2016)
New Revision: 45990
Modified:
data/CVE/list
Log:
Add CVE-2016-9189/pillow
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-11-05 10:23:26 UTC (rev 45989)
+++ data/CVE/list 2016-11-05 10:24:33 UTC (rev 45990)
@@ -8,7 +8,10 @@
NOTE: https://github.com/python-pillow/Pillow/issues/2105
NOTE:
https://github.com/python-pillow/Pillow/pull/2146/commits/5d8a0be45aad78c5a22c8d099118ee26ef8144af
CVE-2016-9189 (Pillow before 3.3.2 allows context-dependent attackers to
obtain ...)
- TODO: check
+ - pillow 3.4.2-1
+ - python-imaging <removed>
+ NOTE: https://github.com/python-pillow/Pillow/issues/2105
+ NOTE:
https://github.com/python-pillow/Pillow/pull/2146/commits/c50ebe6459a131a1ea8ca531f10da616d3ceaa0f
CVE-2016-9188 (Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or
before ...)
TODO: check
CVE-2016-9187 (Unrestricted file upload vulnerability in the double extension
support ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
