[Secure-testing-commits] r38640 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Sat Jan 2 05:22:07 UTC 2016
Author: carnil
Date: 2016-01-02 05:21:57 +0000 (Sat, 02 Jan 2016)
New Revision: 38640
Modified:
data/CVE/list
Log:
CVE-2015-0851/xmltooling fixed in unstable, #793855
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-01-02 05:19:56 UTC (rev 38639)
+++ data/CVE/list 2016-01-02 05:21:57 UTC (rev 38640)
@@ -26057,7 +26057,7 @@
NOTE: http://freeimage.cvs.sourceforge.net/viewvc/freeimage/FreeImage/Source/FreeImage/PluginPCX.cpp?r1=1.18&r2=1.19&pathrev=MAIN
CVE-2015-0851 (XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth ...)
{DSA-3321-1 DLA-290-2 DLA-290-1}
- - xmltooling <unfixed> (bug #793855)
+ - xmltooling 1.5.6-1 (bug #793855)
NOTE: http://shibboleth.net/community/advisories/secadv_20150721.txt
NOTE: Patch: https://git.shibboleth.net/view/?p=cpp-xmltooling.git;a=commitdiff;h=2d795c731e6729309044607154978696a87fd900
NOTE: Initial advisory was listing the wrong CVE, updated later
More information about the Secure-testing-commits
mailing list