Author: carnil
Date: 2017-02-17 20:17:38 +0000 (Fri, 17 Feb 2017)
New Revision: 49030
Modified:
data/CVE/list
Log:
Two CVEs assigned for libapache2-mod-auth-openidc
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-02-17 19:32:35 UTC (rev 49029)
+++ data/CVE/list 2017-02-17 20:17:38 UTC (rev 49030)
@@ -537,10 +537,10 @@
- gnome-keyring <unfixed> (low; bug #395572)
[jessie] - gnome-keyring <no-dsa> (Minor issue)
[wheezy] - gnome-keyring <no-dsa> (Minor issue)
-CVE-2017-XXXX [information leak in error messages]
+CVE-2017-6059 [information leak in error messages]
- libapache2-mod-auth-openidc 2.1.5-1
NOTE: https://github.com/pingidentity/mod_auth_openidc/issues/212
-CVE-2017-XXXX [OIDCUnAuthAction pass does not scrub request headers]
+CVE-2017-6062 [OIDCUnAuthAction pass does not scrub request headers]
- libapache2-mod-auth-openidc 2.1.5-1
NOTE: https://github.com/pingidentity/mod_auth_openidc/issues/222
CVE-2017-XXXX [irssi memory leak]
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
