[Secure-testing-commits] r36319 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Aug 26 15:25:54 UTC 2015


Author: carnil
Date: 2015-08-26 15:25:54 +0000 (Wed, 26 Aug 2015)
New Revision: 36319

Modified:
   data/CVE/list
Log:
Add workaround item for twig

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-08-26 14:07:43 UTC (rev 36318)
+++ data/CVE/list	2015-08-26 15:25:54 UTC (rev 36319)
@@ -329,6 +329,8 @@
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/08/21/5
 CVE-2015-XXXX [arbitrary code execution via the _self variable]
 	- twig 1.20.0-1
+	[jessie] - twig 1.16.2-1+deb8u1
+	NOTE: Add jessie-tagged workaround item until CVE assigned
 	NOTE: http://symfony.com/blog/security-release-twig-1-20-0
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/08/21/3
 CVE-2015-6673 [use-after-free vulnerability in Decoder.cpp]




More information about the Secure-testing-commits mailing list