[Secure-testing-commits] r36714 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Sep 16 15:31:28 UTC 2015


Author: carnil
Date: 2015-09-16 15:31:28 +0000 (Wed, 16 Sep 2015)
New Revision: 36714

Modified:
   data/CVE/list
Log:
Correct information for CVE-2015-6729

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-16 09:04:14 UTC (rev 36713)
+++ data/CVE/list	2015-09-16 15:31:28 UTC (rev 36714)
@@ -2276,10 +2276,7 @@
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://phabricator.wikimedia.org/T97391
 CVE-2015-6729 (Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki ...)
-	- mediawiki <unfixed> (bug #799096)
-	[jessie] - mediawiki <no-dsa> (Minor issues)
-	[wheezy] - mediawiki <no-dsa> (Minor issues)
-	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
+	- mediawiki <not-affected> (Introduced in 1.21)
 	NOTE: https://phabricator.wikimedia.org/T97391
 CVE-2015-6728 (The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, ...)
 	- mediawiki <unfixed> (bug #799096)




More information about the Secure-testing-commits mailing list