[Secure-testing-commits] r39169 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-25 21:19:12 +0000 (Mon, 25 Jan 2016)
New Revision: 39169

Modified:
   data/CVE/list
Log:
Add CVE-2015-7577, kept TODO

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-25 21:17:13 UTC (rev 39168)
+++ data/CVE/list	2016-01-25 21:19:12 UTC (rev 39169)
@@ -8459,8 +8459,13 @@
 	RESERVED
 CVE-2015-7578
 	RESERVED
-CVE-2015-7577
+CVE-2015-7577 [Nested attributes rejection proc bypass in Active Record]
 	RESERVED
+	- rails <unfixed>
+	[wheezy] - rails <not-affected> (Vulnerable code not present, is only a transitional package)
+	- ruby-activerecord-3.2 <removed>
+	- ruby-activerecord-2.3 <removed>
+	TODO: check
 CVE-2015-7576 [Timing attack vulnerability in basic authentication in Action Controller]
 	RESERVED
 	- rails <unfixed>