[Secure-testing-commits] r38312 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2015-12-15 09:25:58 +0000 (Tue, 15 Dec 2015)
New Revision: 38312

Modified:
   data/CVE/list
Log:
Confirm CVE-2015-8557 affects all Debian releases and add bug number

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-15 09:16:36 UTC (rev 38311)
+++ data/CVE/list	2015-12-15 09:25:58 UTC (rev 38312)
@@ -12,11 +12,10 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/14/9
 	TODO: check
 CVE-2015-8557 [Shell Injection in Pygments FontManager._get_nix_font_path]
-	- pygments <unfixed>
+	- pygments <unfixed> (bug #802828)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1276321
 	NOTE: https://bitbucket.org/birkenfeld/pygments-main/commits/0036ab1c99e256298094505e5e92f
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/14/6
-	TODO: check
 CVE-2015-8548 (Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as ...)
 	- chromium-browser 47.0.2526.80-1
 	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)