[Secure-testing-commits] r37916 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-11-26 13:00:45 +0000 (Thu, 26 Nov 2015)
New Revision: 37916

Modified:
   data/CVE/list
Log:
new nodejs issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-26 12:59:17 UTC (rev 37915)
+++ data/CVE/list	2015-11-26 13:00:45 UTC (rev 37916)
@@ -854,6 +854,9 @@
 	NOT-FOR-US: SAP
 CVE-2015-8027
 	RESERVED
+	- nodejs <unfixed>
+	[jessie] - nodejs <not-affected> (0.10 series not affected)
+	NOTE: https://nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764/
 CVE-2015-8024
 	RESERVED
 CVE-2015-8023 (The server implementation of the EAP-MSCHAPv2 protocol in the ...)
@@ -4153,6 +4156,11 @@
 	RESERVED
 CVE-2015-6764
 	RESERVED
+	- libv8-3.14 <unfixed> (unimportant)
+	NOTE: libv8 not covered by security support
+	- nodejs <unfixed>
+	[jessie] - nodejs <not-affected> (0.10 series not affected)
+	NOTE: https://nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764/
 CVE-2015-6763 (Multiple unspecified vulnerabilities in Google Chrome before ...)
 	{DSA-3376-1}
 	- chromium-browser 46.0.2490.71-1