[Secure-testing-commits] r27220 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jun 11 16:40:49 UTC 2014


Author: carnil
Date: 2014-06-11 16:40:49 +0000 (Wed, 11 Jun 2014)
New Revision: 27220

Modified:
   data/CVE/list
Log:
Add fixed version for CVE-2014-3966/mediawiki

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-11 16:17:32 UTC (rev 27219)
+++ data/CVE/list	2014-06-11 16:40:49 UTC (rev 27220)
@@ -134,7 +134,7 @@
 	[squeeze] - xen <not-affected> (Xen versions from 4.2 onwards are vulnerable)
 CVE-2014-3966 [mediawiki Javascript inject by anonymous users on private wikis with $wgRawHtml enabled]
 	RESERVED
-	- mediawiki <unfixed> (low; bug #750527)
+	- mediawiki 1:1.19.16+dfsg-1 (low; bug #750527)
 	[wheezy] - mediawiki <no-dsa> (Minor issue)
 	[squeeze] - mediawiki <end-of-life>
 	NOTE: https://bugzilla.wikimedia.org/show_bug.cgi?id=65501




More information about the Secure-testing-commits mailing list