[Secure-testing-commits] r37256 - in data: CVE DLA

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-10-22 20:31:48 +0000 (Thu, 22 Oct 2015)
New Revision: 37256

Modified:
   data/CVE/list
   data/DLA/list
Log:
Update libxml2 issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-22 20:08:29 UTC (rev 37255)
+++ data/CVE/list	2015-10-22 20:31:48 UTC (rev 37256)
@@ -11935,13 +11935,16 @@
 	- linux-2.6 <removed>
 	NOTE: Fixed by: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/20/1
-CVE-2015-XXXX [out-of-bounds memory access]
+CVE-2015-7942
+	- libxml2 <undetermined>
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=756456#c0
+	TODO: check
+CVE-2015-7941 [out-of-bounds memory access]
 	- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (bug #783010)
-	[squeeze] - libxml2 2.7.8.dfsg-2+squeeze12
-	NOTE: Added workaround item to reflect entry fixed status, remove once CVE assigned
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=744980
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/04/19/5
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/10/22/5
+	NOTE: http://www.openwall.com/lists/oss-security/2015/04/19/5
+	NOTE: http://www.openwall.com/lists/oss-security/2015/10/22/5
 CVE-2015-XXXX [out-of-bounds memory access when parsing an unclosed HTML comment]
 	- libxml2 2.9.2+really2.9.1+dfsg1-0.1 (bug #782985)
 	[squeeze] - libxml2 2.7.8.dfsg-2+squeeze12

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2015-10-22 20:08:29 UTC (rev 37255)
+++ data/DLA/list	2015-10-22 20:31:48 UTC (rev 37256)
@@ -203,7 +203,7 @@
 	{CVE-2015-1330}
 	[squeeze] - unattended-upgrades 0.62.2+squeeze1
 [03 Jul 2015] DLA-266-1 libxml2 - security update
-	{CVE-2015-1819}
+	{CVE-2015-1819 CVE-2015-7941}
 	[squeeze] - libxml2 2.7.8.dfsg-2+squeeze12
 [03 Jul 2015] DLA-265-1 pykerberos - security update
 	{CVE-2015-3206}