[Secure-testing-commits] r35347 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-07-06 21:10:14 +0000 (Mon, 06 Jul 2015)
New Revision: 35347

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-06 20:56:03 UTC (rev 35346)
+++ data/CVE/list	2015-07-06 21:10:14 UTC (rev 35347)
@@ -1465,10 +1465,10 @@
 	NOTE: Upstream commit: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3f7352bf21f8fd7ba3e2fcef9488756f188e12be (v4.1-rc6)
 	NOTE: Introduced in: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a14842f5a3c0e88a1e59fac5c3025db39721f74 (v3.0-rc1)
 CVE-2015-4696 (Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers ...)
-	{DLA-257-1}
+	{DSA-3302-1 DLA-257-1}
 	- libwmf <unfixed> (bug #784192)
 CVE-2015-4695 (meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of ...)
-	{DLA-257-1}
+	{DSA-3302-1 DLA-257-1}
 	- libwmf <unfixed> (bug #784205)
 CVE-2015-4680 [insufficent CRL application]
 	RESERVED
@@ -1963,7 +1963,7 @@
 	NOTE: https://bugs.php.net/bug.php?id=69719
 	NOTE: Fixed in 5.6.10 and 5.4.42 upstream
 CVE-2015-4588 (Heap-based buffer overflow in the DecodeImage function in libwmf ...)
-	{DLA-253-1}
+	{DSA-3302-1 DLA-253-1}
 	- libwmf <unfixed> (bug #787644)
 CVE-2015-4556 [buffer overrun in CHICKEN Scheme's string-translate* procedure]
 	RESERVED
@@ -2691,7 +2691,6 @@
 	NOTE: Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0e5cc9a40ada6046e6bc3bdfcd0c0d7e4b706b14 (v3.19-rc3)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/06/03/4
 CVE-2015-5366 [Linux UDP checksum DoS EGAIN part]
-	RESERVED
 	- linux <unfixed>
 	- linux-2.6 <removed>
 	NOTE: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0 (v4.1-rc7)
@@ -12976,7 +12975,7 @@
 	- pycode-browser 1:1.0-1 (bug #790365)
 	[jessie] - pycode-browser <no-dsa> (Minor issue)
 CVE-2015-0848 (Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers ...)
-	{DLA-253-1}
+	{DSA-3302-1 DLA-253-1}
 	- libwmf <unfixed> (bug #787644)
 CVE-2015-0847 (nbd-server.c in Network Block Device (nbd-server) before 3.11 does not ...)
 	{DSA-3271-1 DLA-223-1}