[Secure-testing-commits] r36306 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Aug 26 05:25:47 UTC 2015


Author: carnil
Date: 2015-08-26 05:25:47 +0000 (Wed, 26 Aug 2015)
New Revision: 36306

Modified:
   data/CVE/list
Log:
Update entries for fixes in libxml2 with unstable upload

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-26 05:00:42 UTC (rev 36305)
+++ data/CVE/list	2015-08-26 05:25:47 UTC (rev 36306)
@@ -8457,13 +8457,13 @@
 	NOTE: Fixed by: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/20/1
 CVE-2015-XXXX [out-of-bounds memory access]
-	- libxml2 <unfixed> (bug #783010)
+	- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (bug #783010)
 	[squeeze] - libxml2 2.7.8.dfsg-2+squeeze12
 	NOTE: Added workaround item to reflect entry fixed status, remove once CVE assigned
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=744980
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/04/19/5
 CVE-2015-XXXX [out-of-bounds memory access when parsing an unclosed HTML comment]
-	- libxml2 <unfixed> (bug #782985)
+	- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (bug #782985)
 	[squeeze] - libxml2 2.7.8.dfsg-2+squeeze12
 	NOTE: Added workaround item to reflect entry fixed status, remove once CVE assigned
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/04/19/4
@@ -13147,7 +13147,7 @@
 	NOTE: Patch: https://github.com/rest-client/rest-client/pull/365.patch (will need new dependency to ruby-http-cookie)
 CVE-2015-1819 (The xmlreader in libxml allows remote attackers to cause a denial of ...)
 	{DLA-266-1}
-	- libxml2 <unfixed> (low; bug #782782)
+	- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (low; bug #782782)
 	NOTE: https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9
 	NOTE: Concerns by Florian Weimer: https://bugzilla.gnome.org/show_bug.cgi?id=748278
 CVE-2015-1818 (XML external entity (XXE) vulnerability in the dashbuilder import ...)




More information about the Secure-testing-commits mailing list