[Secure-testing-commits] r37439 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-10-29 21:31:33 +0000 (Thu, 29 Oct 2015)
New Revision: 37439

Modified:
   data/CVE/list
Log:
new mediawiki issues
extension NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-29 21:10:20 UTC (rev 37438)
+++ data/CVE/list	2015-10-29 21:31:33 UTC (rev 37439)
@@ -22,12 +22,16 @@
 	RESERVED
 CVE-2015-8009
 	RESERVED
+	NOT-FOR-US: Mediawiki extension OAuth
 CVE-2015-8008
 	RESERVED
+	NOT-FOR-US: Mediawiki extension OAuth
 CVE-2015-8007
 	RESERVED
+	NOT-FOR-US: Mediawiki extension Echo
 CVE-2015-8006
 	RESERVED
+	NOT-FOR-US: Mediawiki extension PageTriage
 CVE-2015-XXXX [iptables-persistent minor local info leak]
 	- iptables-persistent <unfixed> (low; bug #764645)
 	[squeeze] - iptables-persistent <no-dsa> (Minor issue)
@@ -42,14 +46,39 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1274452
 CVE-2015-8005
 	RESERVED
+	- mediawiki <unfixed>
+	[jessie] - mediawiki <no-dsa> (Minor issues)
+	[wheezy] - mediawiki <no-dsa> (Minor issues)
+	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOTE: https://phabricator.wikimedia.org/T108616
 CVE-2015-8004
 	RESERVED
+	- mediawiki <unfixed>
+	[jessie] - mediawiki <no-dsa> (Minor issues)
+	[wheezy] - mediawiki <no-dsa> (Minor issues)
+	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOTE: https://phabricator.wikimedia.org/T95589
 CVE-2015-8003
 	RESERVED
+	- mediawiki <unfixed>
+	[jessie] - mediawiki <no-dsa> (Minor issues)
+	[wheezy] - mediawiki <no-dsa> (Minor issues)
+	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOTE: https://phabricator.wikimedia.org/T91850
 CVE-2015-8002
 	RESERVED
+	- mediawiki <unfixed>
+	[jessie] - mediawiki <no-dsa> (Minor issues)
+	[wheezy] - mediawiki <no-dsa> (Minor issues)
+	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOTE: https://phabricator.wikimedia.org/T91205
 CVE-2015-8001
 	RESERVED
+	- mediawiki <unfixed>
+	[jessie] - mediawiki <no-dsa> (Minor issues)
+	[wheezy] - mediawiki <no-dsa> (Minor issues)
+	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOTE: https://phabricator.wikimedia.org/T91203
 CVE-2015-8000
 	RESERVED
 CVE-2015-7999