[Secure-testing-commits] r43384 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-07-23 06:14:43 +0000 (Sat, 23 Jul 2016)
New Revision: 43384

Modified:
   data/CVE/list
Log:
Add CVE-2016-1000030/pidgin

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-23 06:03:48 UTC (rev 43383)
+++ data/CVE/list	2016-07-23 06:14:43 UTC (rev 43384)
@@ -263,8 +263,13 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2016/07/20/6
 CVE-2016-6249
 	RESERVED
-CVE-2016-1000030
+CVE-2016-1000030 [X.509 Certificates Improperly Imported]
 	RESERVED
+	- pidgin 2.11.0-1 (unimportant)
+	[jessie] - pidgin 2.11.0-0+deb8u1
+	NOTE: http://www.pidgin.im/news/security/?id=91
+	NOTE: https://bitbucket.org/pidgin/main/commits/d6fc1ce76ffe
+	NOTE: Furthermore pidgin in Debian is not compiled to use GnuTLS (--enable-gnutls=no)
 CVE-2016-XXXX [insecure default PATH]
 	- dietlibc 0.34~cvs20160606-2
 	NOTE: http://news.gmane.org/find-root.php?message_id=alpine.DEB.2.20.1607181048300.24083%40tglase.lan.tarent.de