[Secure-testing-commits] r47561 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Dec 29 20:52:46 UTC 2016


Author: carnil
Date: 2016-12-29 20:52:46 +0000 (Thu, 29 Dec 2016)
New Revision: 47561

Modified:
   data/CVE/list
Log:
Add two new ikiwiki issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-29 16:54:32 UTC (rev 47560)
+++ data/CVE/list	2016-12-29 20:52:46 UTC (rev 47561)
@@ -2413,6 +2413,11 @@
 	RESERVED
 CVE-2016-10014
 	RESERVED
+CVE-2016-9645 [incomplete fix for CVE-2016-10026]
+	- ikiwiki <unfixed>
+	[jessie] - ikiwiki <not-affected> (Incomplete fix for CVE-2016-10026 not applied)
+	[wheezy] - ikiwiki <not-affected> (Incomplete fix for CVE-2016-10026 not applied)
+	NOTE: https://ikiwiki.info/security/#cve-2016-9645
 CVE-2016-10026 [authorization bypass when reverting changes]
 	RESERVED
 	- ikiwiki 3.20161219
@@ -10552,10 +10557,11 @@
 	RESERVED
 CVE-2016-9647
 	RESERVED
-CVE-2016-9646
+CVE-2016-9646 [commit metadata forgery]
 	RESERVED
-CVE-2016-9645
-	RESERVED
+	- ikiwiki <unfixed>
+	[jessie] - ikiwiki <no-dsa> (Minor issue)
+	NOTE: https://ikiwiki.info/security/#cve-2016-9646
 CVE-2016-9643
 	RESERVED
 CVE-2016-9642




More information about the Secure-testing-commits mailing list