[Secure-testing-commits] r37385 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-10-27 21:10:11 +0000 (Tue, 27 Oct 2015)
New Revision: 37385

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-27 21:07:04 UTC (rev 37384)
+++ data/CVE/list	2015-10-27 21:10:11 UTC (rev 37385)
@@ -608,10 +608,12 @@
 	NOTE: http://symfony.com/blog/security-release-twig-1-20-0
 CVE-2015-7804 [Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"]
 	RESERVED
+	{DSA-3380-1}
 	- php5 5.6.14+dfsg-1 (medium)
 	NOTE: https://bugs.php.net/bug.php?id=70433
 CVE-2015-7803 [Null pointer dereference in phar_get_fp_offset()]
 	RESERVED
+	{DSA-3380-1}
 	- php5 5.6.14+dfsg-1 (low)
 	NOTE: https://bugs.php.net/bug.php?id=69720
 CVE-2015-7764
@@ -4005,8 +4007,8 @@
 	RESERVED
 CVE-2015-6341 (The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices ...)
 	TODO: check
-CVE-2015-6340
-	RESERVED
+CVE-2015-6340 (The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on ...)
+	TODO: check
 CVE-2015-6339
 	RESERVED
 CVE-2015-6338
@@ -5707,8 +5709,8 @@
 	RESERVED
 CVE-2015-5666
 	RESERVED
-CVE-2015-5665
-	RESERVED
+CVE-2015-5665 (Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE ...)
+	TODO: check
 CVE-2015-5664
 	RESERVED
 CVE-2015-5663