[Secure-testing-commits] r30715 - in data: . CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2014-12-12 16:17:07 +0000 (Fri, 12 Dec 2014)
New Revision: 30715

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
Add rpm, unrtf, wordpress, xorg-server and zoph to dla-needed.txt

Filed an upstream ticket for zoph.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-12 15:52:27 UTC (rev 30714)
+++ data/CVE/list	2014-12-12 16:17:07 UTC (rev 30715)
@@ -2169,6 +2169,7 @@
 CVE-2014-XXXX [zoph multiple issues]
 	- zoph <removed>
 	NOTE: http://seclists.org/fulldisclosure/2014/Nov/45
+	NOTE: https://github.com/jeroenrnl/zoph/issues/59
 CVE-2014-8988 (MantisBT before 1.2.18 allows remote authenticated users to bypass the ...)
 	- mantis <removed>
 	[squeeze] - mantis <end-of-life> (Unsupported in squeeze-lts)

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2014-12-12 15:52:27 UTC (rev 30714)
+++ data/dla-needed.txt	2014-12-12 16:17:07 UTC (rev 30715)
@@ -61,6 +61,8 @@
 --
 roundup (Thorsten Alteholz)
 --
+rpm
+--
 ruby1.9.1 (Matt Palmer)
 --
 squid (Matt Palmer)
@@ -73,12 +75,22 @@
 --
 unbound (Thorsten Alteholz)
 --
+unrtf
+--
 wireshark (Balint Reczey)
 --
+wordpress
+--
 wpasupplicant (geissert)
 --
+xorg-server
+--
 zendframework
 --
+zoph
+ NOTE: Has been dropped from newer releases. Should we instead mark
+ it unsupported?
+--