[Secure-testing-commits] r36307 - in data: CVE DSA

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-08-26 06:14:36 +0000 (Wed, 26 Aug 2015)
New Revision: 36307

Modified:
   data/CVE/list
   data/DSA/list
Log:
CVE-2015-6525 split from CVE-2014-6272

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-26 05:25:47 UTC (rev 36306)
+++ data/CVE/list	2015-08-26 06:14:36 UTC (rev 36307)
@@ -283,7 +283,9 @@
 CVE-2015-6528 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
 	NOT-FOR-US: Coppermine Photo Gallery
 CVE-2015-6525 (Multiple integer overflows in the evbuffer API in Libevent 2.0.x ...)
-	TODO: check
+	- libevent 2.0.21-stable-2
+	[squeeze] - libevent <not-affected> (Only for issues in 2.0.x and 2.1.x)
+	NOTE: Split from CVE-2014-6272
 CVE-2015-6524 (The LDAPLoginModule implementation the Java Authentication and ...)
 	TODO: check
 CVE-2015-XXXX [PCRE Library Heap Overflow in compile_regex()]

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2015-08-26 05:25:47 UTC (rev 36306)
+++ data/DSA/list	2015-08-26 06:14:36 UTC (rev 36307)
@@ -763,7 +763,7 @@
 	{CVE-2014-6316 CVE-2014-7146 CVE-2014-8553 CVE-2014-8554 CVE-2014-8598 CVE-2014-8986 CVE-2014-8988 CVE-2014-9089 CVE-2014-9117 CVE-2014-9269 CVE-2014-9270 CVE-2014-9271 CVE-2014-9272 CVE-2014-9280 CVE-2014-9281 CVE-2014-9388 CVE-2014-9506 CVE-2014-6387 CVE-2013-4460 CVE-2013-1934 CVE-2013-1811}
 	[wheezy] - mantis 1.2.18-1
 [06 Jan 2015] DSA-3119-1 libevent - security update
-	{CVE-2014-6272}
+	{CVE-2014-6272 CVE-2015-6525}
 	[wheezy] - libevent 2.0.19-stable-3+deb7u1
 [05 Jan 2015] DSA-3118-1 strongswan - security update
 	{CVE-2014-9221}