[Secure-testing-commits] r27134 - data/CVE

Henri Salo fgeek-guest at moszumanska.debian.org
Wed Jun 4 06:11:11 UTC 2014


Author: fgeek-guest
Date: 2014-06-04 06:11:11 +0000 (Wed, 04 Jun 2014)
New Revision: 27134

Modified:
   data/CVE/list
Log:
mediawiki issue reference

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-04 06:10:35 UTC (rev 27133)
+++ data/CVE/list	2014-06-04 06:11:11 UTC (rev 27134)
@@ -1,6 +1,7 @@
 CVE-2014-XXXX [mediawiki Javascript inject by anonymous users on private wikis with $wgRawHtml enabled]
 	- mediawiki <unfixed> (low)
 	NOTE: needs wgRawHTML enabled; may not be easy to exploit
+	NOTE: https://bugzilla.wikimedia.org/show_bug.cgi?id=65501
 CVE-2014-3940 [missing check during hugepage migration]
 	- linux <unfixed>
 	- linux-2.6 <removed>




More information about the Secure-testing-commits mailing list