[Secure-testing-commits] r38441 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-20 07:25:22 +0000 (Sun, 20 Dec 2015)
New Revision: 38441

Modified:
   data/CVE/list
Log:
Add netsurf as affected source package for CVE-2015-750{5,6,7,8}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-19 22:38:56 UTC (rev 38440)
+++ data/CVE/list	2015-12-20 07:25:22 UTC (rev 38441)
@@ -5071,21 +5071,25 @@
 	- libnsbmp <unfixed>
 	[squeeze] - libnsbmp <no-dsa> (Library not used anywhere in Debian)
 	TODO: check, remove in point updates
+	- netsurf <unfixed>
 CVE-2015-7507 [out-of-bounds read]
 	RESERVED
 	- libnsbmp <unfixed>
 	[squeeze] - libnsbmp <no-dsa> (Library not used anywhere in Debian)
 	TODO: check, remove in point updates
+	- netsurf <unfixed>
 CVE-2015-7506 [out-of-bounds read]
 	RESERVED
 	- libnsgif <unfixed>
 	[squeeze] - libnsgif <no-dsa> (Library not used anywhere in Debian)
 	TODO: check, remove in point updates
+	- netsurf <unfixed>
 CVE-2015-7505 [stack overflow]
 	RESERVED
 	- libnsgif <unfixed>
 	[squeeze] - libnsgif <no-dsa> (Library not used anywhere in Debian)
 	TODO: check, remove in point updates
+	- netsurf <unfixed>
 CVE-2015-7504 [net: pcnet: heap overflow vulnerability in loopback mode]
 	RESERVED
 	- qemu 1:2.5+dfsg-1 (bug #806742)