[Secure-testing-commits] r38339 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-12-15 21:10:39 +0000 (Tue, 15 Dec 2015)
New Revision: 38339

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-15 20:44:32 UTC (rev 38338)
+++ data/CVE/list	2015-12-15 21:10:39 UTC (rev 38339)
@@ -31,6 +31,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2015/12/14/9
 	TODO: check
 CVE-2015-8557 [Shell Injection in Pygments FontManager._get_nix_font_path]
+	{DLA-369-1}
 	- pygments <unfixed> (bug #802828)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1276321
 	NOTE: https://bitbucket.org/birkenfeld/pygments-main/commits/0036ab1c99e256298094505e5e92f
@@ -60,6 +61,7 @@
 	NOTE: https://github.com/eventmachine/eventmachine/issues/501#issuecomment-37307556
 	TODO: check
 CVE-2015-8560 [code execution via improper escaping of ; in foomatic-rip]
+	{DSA-3419-1}
 	- cups-filters 1.4.0-1 (bug #807930)
 	[wheezy] - cups-filters <not-affected> (Vulnerable code not present; introduced in 1.0.42)
 	- foomatic-filters <unfixed> (bug #807993)
@@ -2989,6 +2991,7 @@
 	NOTE: https://phabricator.wikimedia.org/T91203
 CVE-2015-8000 [Responses with a malformed class attribute can trigger an assertion failure in db.c]
 	RESERVED
+	{DSA-3420-1}
 	- bind9 <unfixed> (bug #808081)
 	NOTE: https://kb.isc.org/article/AA-01317
 CVE-2015-7999