[Secure-testing-commits] r36319 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Aug 26 15:25:54 UTC 2015
Author: carnil
Date: 2015-08-26 15:25:54 +0000 (Wed, 26 Aug 2015)
New Revision: 36319
Modified:
data/CVE/list
Log:
Add workaround item for twig
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-08-26 14:07:43 UTC (rev 36318)
+++ data/CVE/list 2015-08-26 15:25:54 UTC (rev 36319)
@@ -329,6 +329,8 @@
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/08/21/5
CVE-2015-XXXX [arbitrary code execution via the _self variable]
- twig 1.20.0-1
+ [jessie] - twig 1.16.2-1+deb8u1
+ NOTE: Add jessie-tagged workaround item until CVE assigned
NOTE: http://symfony.com/blog/security-release-twig-1-20-0
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/08/21/3
CVE-2015-6673 [use-after-free vulnerability in Decoder.cpp]
More information about the Secure-testing-commits
mailing list