[Secure-testing-commits] r37100 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Oct 13 14:35:59 UTC 2015


Author: jmm
Date: 2015-10-13 14:35:58 +0000 (Tue, 13 Oct 2015)
New Revision: 37100

Modified:
   data/CVE/list
Log:
jsoup no-dsa
glibc bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-13 14:09:50 UTC (rev 37099)
+++ data/CVE/list	2015-10-13 14:35:58 UTC (rev 37100)
@@ -2352,7 +2352,7 @@
 	- ruby-devise-two-factor 2.0.0-1 (bug #798466)
 	NOTE: http://www.openwall.com/lists/oss-security/2015/09/06/2
 CVE-2015-XXXX [Glibc Pointer guarding weakness]
-	- glibc <unfixed>
+	- glibc <unfixed> (bug #801691)
 	[jessie] - glibc <no-dsa> (Minor issue)
 	- eglibc <removed>
 	[wheezy] - eglibc <no-dsa> (Minor issue)
@@ -2555,6 +2555,8 @@
 CVE-2015-6748 [XSS vulnerability in jsoup related to incomplete tags at EOF]
 	RESERVED
 	- jsoup 1.8.3-1 (bug #797275)
+	[wheezy] - jsoup <no-dsa> (Minor issue)
+	[jessie] - jsoup <no-dsa> (Minor issue)
 	NOTE: https://github.com/jhy/jsoup/pull/582
 	NOTE: https://hibernate.atlassian.net/browse/HV-1012
 	NOTE: https://issues.jboss.org/browse/WFLY-5223




More information about the Secure-testing-commits mailing list