[Secure-testing-commits] r35683 - data/CVE

Alessandro Ghedini ghedo at moszumanska.debian.org
Fri Jul 24 17:48:34 UTC 2015


Author: ghedo
Date: 2015-07-24 17:48:34 +0000 (Fri, 24 Jul 2015)
New Revision: 35683

Modified:
   data/CVE/list
Log:
Add xmltooling issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-24 16:27:24 UTC (rev 35682)
+++ data/CVE/list	2015-07-24 17:48:34 UTC (rev 35683)
@@ -1,3 +1,8 @@
+CVE-2015-XXXX [Shibboleth SP software crashes on well-formed but invalid XML]
+	- xmltooling <unfixed>
+	NOTE: http://shibboleth.net/community/advisories/secadv_20150721.txt
+	NOTE: The upstream advisory lists the wrong CVE
+	NOTE: opensaml2 will need binNMUs
 CVE-2015-5621
 	RESERVED
 CVE-2015-5620




More information about the Secure-testing-commits mailing list