[Secure-testing-commits] r39630 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Fri Feb 12 11:15:32 UTC 2016


Author: jmm
Date: 2016-02-12 11:15:32 +0000 (Fri, 12 Feb 2016)
New Revision: 39630

Modified:
   data/CVE/list
Log:
new iceweasel issue (sid only)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-02-12 06:41:30 UTC (rev 39629)
+++ data/CVE/list	2016-02-12 11:15:32 UTC (rev 39630)
@@ -631,6 +631,7 @@
 	- python-imaging <removed>
 	NOTE: https://github.com/python-pillow/Pillow/pull/1706
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/02/02/5
+	NOTE: https://github.com/python-pillow/Pillow/commit/ae453aa18b66af54e7ff716f4ccb33adca60afd4
 CVE-2016-2221 [open redirect vulnerability]
 	RESERVED
 	{DSA-3472-1}
@@ -1141,6 +1142,11 @@
 	RESERVED
 CVE-2016-1949
 	RESERVED
+	- iceweasel <unfixed>
+	[jessie] - iceweasel <not-affected> (Only affects Firefox 43.x)
+	[wheezy] - iceweasel <not-affected> (Only affects Firefox 43.x)
+	[squeeze] - iceweasel <not-affected> (Only affects Firefox 43.x)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2016-13/
 CVE-2016-1948 (Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is ...)
 	- iceweasel <not-affected> (Only affects Firefox for Android)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2016-12/




More information about the Secure-testing-commits mailing list