[Secure-testing-commits] r36694 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-15 19:48:02 +0000 (Tue, 15 Sep 2015)
New Revision: 36694

Modified:
   data/CVE/list
Log:
Mark CVE-2015-6731 as NFU

Note for reviewes: please double check.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-15 17:55:32 UTC (rev 36693)
+++ data/CVE/list	2015-09-15 19:48:02 UTC (rev 36694)
@@ -2265,14 +2265,10 @@
 	NOTE: https://phabricator.wikimedia.org/T103765
 	TODO: recheck after CVE assignment, in extension rather than mediawiki core
 CVE-2015-6731 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
-	- mediawiki <unfixed>
-	[jessie] - mediawiki <no-dsa> (Minor issues)
-	[wheezy] - mediawiki <no-dsa> (Minor issues)
-	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOT-FOR-US: SemanticForms extension for MediaWiki
 	NOTE: https://phabricator.wikimedia.org/T103391
 	NOTE: https://phabricator.wikimedia.org/T103765
 	NOTE: https://phabricator.wikimedia.org/T103765
-	TODO: recheck after CVE assignment, in extension rather than mediawiki core
 CVE-2015-6730 (Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki ...)
 	- mediawiki <unfixed>
 	[jessie] - mediawiki <no-dsa> (Minor issues)