[Secure-testing-commits] r34124 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-05-08 06:36:10 +0000 (Fri, 08 May 2015)
New Revision: 34124

Modified:
   data/CVE/list
Log:
new semi/mew/mew-beta issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-08 05:03:33 UTC (rev 34123)
+++ data/CVE/list	2015-05-08 06:36:10 UTC (rev 34124)
@@ -1,3 +1,23 @@
+CVE-2015-XXXX [incorrect parsing of from header when assigning pgp keys]
+	- semi <unfixed> 
+	[squeeze] - semi <no-dsa> (Minor issue)
+	[wheezy] - semi <no-dsa> (Minor issue)
+	[jessie] - semi <no-dsa> (Minor issue)
+        NOTE: http://thread.gmane.org/gmane.mail.wanderlust.general.japanese/9819
+        NOTE: Fixed in https://github.com/wanderlust/semi/commit/9976269556c5bcc021e4edf1b0e1accd39929528
+CVE-2015-XXXX [incorrect substring matching when assigning pgp keys]
+	- semi <unfixed> 
+	[squeeze] - semi <no-dsa> (Minor issue)
+	[wheezy] - semi <no-dsa> (Minor issue)
+	[jessie] - semi <no-dsa> (Minor issue)
+	- mew 1:6.6-3
+	[squeeze] - mew <no-dsa> (Minor issue)
+	[wheezy] - mew <no-dsa> (Minor issue)
+	[jessie] - mew <no-dsa> (Minor issue)
+	- mew-beta 7.0.50~6.6+0.20150508-1
+	[squeeze] - mew-beta <no-dsa> (Minor issue)
+	[wheezy] - mew-beta <no-dsa> (Minor issue)
+	[jessie] - mew-beta <no-dsa> (Minor issue)
 CVE-2015-XXXX [Wordpress 4.2.2 security release]
 	- wordpress <unfixed> (bug #784603)
 	NOTE: https://wordpress.org/news/2015/05/wordpress-4-2-2/