[Secure-testing-commits] r34133 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-05-08 16:53:33 +0000 (Fri, 08 May 2015)
New Revision: 34133

Modified:
   data/CVE/list
Log:
Update wordpress entry, CVE-2015-3429 is assigned for the XSS vulnerability

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-08 16:50:14 UTC (rev 34132)
+++ data/CVE/list	2015-05-08 16:53:33 UTC (rev 34133)
@@ -21,10 +21,10 @@
 	[squeeze] - mew-beta <no-dsa> (Minor issue)
 	[wheezy] - mew-beta <no-dsa> (Minor issue)
 	[jessie] - mew-beta <no-dsa> (Minor issue)
-CVE-2015-XXXX [Wordpress 4.2.2 security release]
+CVE-2015-3429 [DOM XSS Vulnerability in Twenty Fifteen WordPress Theme]
 	- wordpress <unfixed> (bug #784603)
 	NOTE: https://wordpress.org/news/2015/05/wordpress-4-2-2/
-	TODO: check earlier versions
+	NOTE: https://www.netsparker.com/cve-2015-3429-dom-xss-vulnerability-in-twenty-fifteen-wordpress-theme/
 CVE-2015-XXXX [V3 protocol handler vulnerable to downgrade attacks]
 	- zeromq3 4.0.5+dfsg-3 (bug #784366)
 	NOTE: https://github.com/zeromq/libzmq/issues/1273
@@ -516,8 +516,6 @@
 	RESERVED
 CVE-2015-3430
 	RESERVED
-CVE-2015-3429
-	RESERVED
 CVE-2015-3428
 	RESERVED
 CVE-2015-3426