[Secure-testing-commits] r35981 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-11 20:23:54 +0000 (Tue, 11 Aug 2015)
New Revision: 35981

Modified:
   data/CVE/list
Log:
Add pdf.js information for CVE-2015-4495 and add TODO item

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-11 19:37:38 UTC (rev 35980)
+++ data/CVE/list	2015-08-11 20:23:54 UTC (rev 35981)
@@ -3548,6 +3548,10 @@
 	[wheezy] - iceweasel <not-affected> (Only affects 38.x ESR and 39)
 	[squeeze] - iceweasel <not-affected> (Only affects 38.x ESR and 39)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/
+	- pdf.js 1.1.366+dfsg-1
+	NOTE: https://github.com/mozilla/pdf.js/commit/0b5330781c367fcbc997947adbf2bdcdf71f61bc
+	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1179262
+	TODO: check if exploitable as well for pdf.js and needs an update
 CVE-2015-4494 (Mozilla Firefox OS before 2.2 does not require the wifi-manage ...)
 	TODO: check
 CVE-2015-4493