[Secure-testing-commits] r33406 - in data: . CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Mon Apr 6 21:01:22 UTC 2015


Author: jmm
Date: 2015-04-06 21:01:22 +0000 (Mon, 06 Apr 2015)
New Revision: 33406

Modified:
   data/CVE/list
   data/next-point-update.txt
Log:
ikiwiki no-dsa/spu


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-06 20:49:15 UTC (rev 33405)
+++ data/CVE/list	2015-04-06 21:01:22 UTC (rev 33406)
@@ -222,6 +222,8 @@
 CVE-2015-2793 [cross-site scripting via openid_identifier]
 	RESERVED
 	- ikiwiki 3.20141016.2 (bug #781483)
+	[wheezy] - ikiwiki <no-dsa> (Minor issue)
+	[squeeze] - ikiwiki <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/03/30/5
 CVE-2015-2806 [two-byte stack overflow in asn1_der_decoding]
 	RESERVED

Modified: data/next-point-update.txt
===================================================================
--- data/next-point-update.txt	2015-04-06 20:49:15 UTC (rev 33405)
+++ data/next-point-update.txt	2015-04-06 21:01:22 UTC (rev 33406)
@@ -46,3 +46,5 @@
 	[wheezy] - osc 0.134.1-2+deb7u1
 CVE-2015-XXXX [crashes found with afl]
 	[wheezy] - hp2xx 3.4.4-8+deb7u1
+CVE-2015-2793
+	[wheezy] - ikiwiki 3.20120629.2




More information about the Secure-testing-commits mailing list