[Secure-testing-commits] r43652 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Jul 30 13:39:34 UTC 2016


Author: carnil
Date: 2016-07-30 13:39:34 +0000 (Sat, 30 Jul 2016)
New Revision: 43652

Modified:
   data/CVE/list
Log:
Update notes for CVE-2016-5838

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-30 13:31:55 UTC (rev 43651)
+++ data/CVE/list	2016-07-30 13:39:34 UTC (rev 43652)
@@ -2407,7 +2407,10 @@
 CVE-2016-5838 (WordPress before 4.5.3 allows remote attackers to bypass intended ...)
 	{DLA-568-1}
 	- wordpress 4.5.3+dfsg-1
+	NOTE: https://core.trac.wordpress.org/changeset/37762/
+	NOTE: https://core.trac.wordpress.org/ticket/37047
 	NOTE: https://wordpress.org/news/2016/06/wordpress-4-5-3/
+	TODO: check if this is the correct change, according to announce Michael Adams is reporter, but ticket mentions Jeremy Felt as reporter
 CVE-2016-5837 (WordPress before 4.5.3 allows remote attackers to bypass intended ...)
 	{DLA-568-1}
 	- wordpress 4.5.3+dfsg-1




More information about the Secure-testing-commits mailing list