[Secure-testing-commits] r38125 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-12-06 10:29:04 +0000 (Sun, 06 Dec 2015)
New Revision: 38125

Modified:
   data/CVE/list
Log:
gcc 5.3 uploaded to sid
keepassx no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-06 09:01:50 UTC (rev 38124)
+++ data/CVE/list	2015-12-06 10:29:04 UTC (rev 38125)
@@ -12,7 +12,7 @@
 	NOTE: https://github.com/redmine/redmine/commit/945a091c94a9ed651f61e225fa8646479478e9d4
 	NOTE: upstream fixed in 2.6.8, 3.0.6 and 3.1.2
 CVE-2015-XXXX [Shotwell does not verify TLS certificates]
-	- shotwell <unfixed> (bug #807110)
+	- shotwell <unfixed> (low; bug #807110)
 	[jessie] - shotwell <no-dsa> (Minor issue)
 	[wheezy] - shotwell <no-dsa> (Minor issue)
 	[squeeze] - shotwell <no-dsa> (Minor issue)
@@ -213,6 +213,8 @@
 CVE-2015-8378 [canceling export operation creates cleartext copy of all of the user's KeePassX password database entries]
 	RESERVED
 	- keepassx 0.4.3+dfsg-1 (bug #791858)
+	[jessie] - keepassx <no-dsa> (Minor issue)
+	[wheezy] - keepassx <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/11/30/4
 CVE-2015-8375
 	RESERVED
@@ -8541,8 +8543,7 @@
 	[wheezy] - eglibc <not-affected> (Vulnerable code not present)
 	[squeeze] - eglibc <not-affected> (Vulnerable code not present)
 CVE-2015-5276 (The std::random_device class in libstdc++ in the GNU Compiler ...)
-	[experimental] - gcc-5 5.3.0-1
-	- gcc-5 <unfixed>
+	- gcc-5 5.3.0-1
 	- gcc-4.9 4.9.3-5
 	[jessie] - gcc-4.9 <no-dsa> (Minor issue)
 	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65142