[Secure-testing-commits] r47257 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-20 20:48:26 +0000 (Tue, 20 Dec 2016)
New Revision: 47257

Modified:
   data/CVE/list
Log:
Add CVE-2016-1255/postgresql-common, 178 waiting in NEW

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-20 20:41:15 UTC (rev 47256)
+++ data/CVE/list	2016-12-20 20:48:26 UTC (rev 47257)
@@ -36627,8 +36627,12 @@
 	RESERVED
 CVE-2015-8699 (Multiple cross-site scripting (XSS) vulnerabilities in CA Release ...)
 	NOT-FOR-US: CA Release Automation
-CVE-2016-1255
+CVE-2016-1255 [privilege escalation from postgresql user to root]
 	RESERVED
+	- postgresql-common 178
+	[jessie] - postgresql-common <no-dsa> (Will be fixed via point release)
+	NOTE: Fix: https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1ee
+	NOTE: Testsuite update: https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=30f0e4200cfc358b4536bf5d1f6c48abb779d438
 CVE-2016-1254 [TROVE-2016-12-002]
 	RESERVED
 	- tor 0.2.9.8-2 (bug #848847)