[Secure-testing-commits] r41320 - data/CVE

[Micha Lenk]

Author: micha
Date: 2016-04-30 19:38:35 +0000 (Sat, 30 Apr 2016)
New Revision: 41320

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-7642

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-30 19:25:16 UTC (rev 41319)
+++ data/CVE/list	2016-04-30 19:38:35 UTC (rev 41320)
@@ -16309,10 +16309,12 @@
 	- kdelibs <removed>
 	- arts <removed>
 	NOTE: https://quickgit.kde.org/?p=kdelibs.git&a=blobdiff&h=8c0f6401271c495c68e340e06b09239eb755ce5e&hp=45b72f0d5c3421b571e9515497352a0a9942a075&hb=cc5515ed7ce8884c9b18169158ba29ab2f7a3db7&f=kinit%2Flnusertemp.c
-CVE-2015-7542
+CVE-2015-7542 [Uses outdated bundled CA certificates]
 	RESERVED
 	- libgwenhywfar 4.12.0beta-3 (bug #748955; medium)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1272503
+	NOTE: Debian packaging fix: http://source.lenk.info/git/pkg-libgwenhywfar.git/commitdiff/86dacaae3a233f6ca3b420e0bfdb12eb5ef40b91
+	TODO: cherry-pick for wheezy
 CVE-2015-7541 (The initialize method in the Histogram class in ...)
 	NOT-FOR-US: colorscore gem for Ruby
 CVE-2015-7540 (The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 ...)