[Secure-testing-commits] r36695 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-15 19:49:17 +0000 (Tue, 15 Sep 2015)
New Revision: 36695

Modified:
   data/CVE/list
Log:
Mark CVE-2015-6732 as NFU

Note for reviews: please double check that I haven't missed something
about the mediawiki extensions.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-15 19:48:02 UTC (rev 36694)
+++ data/CVE/list	2015-09-15 19:49:17 UTC (rev 36695)
@@ -2256,14 +2256,10 @@
 	NOTE: https://phabricator.wikimedia.org/T108198
 	TODO: recheck after CVE assignment, in extension rather than mediawiki core
 CVE-2015-6732 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
-	- mediawiki <unfixed>
-	[jessie] - mediawiki <no-dsa> (Minor issues)
-	[wheezy] - mediawiki <no-dsa> (Minor issues)
-	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	NOT-FOR-US: SemanticForms extension for MediaWiki
 	NOTE: https://phabricator.wikimedia.org/T103391
 	NOTE: https://phabricator.wikimedia.org/T103765
 	NOTE: https://phabricator.wikimedia.org/T103765
-	TODO: recheck after CVE assignment, in extension rather than mediawiki core
 CVE-2015-6731 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
 	NOT-FOR-US: SemanticForms extension for MediaWiki
 	NOTE: https://phabricator.wikimedia.org/T103391