[Secure-testing-commits] r40524 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-22 18:24:10 +0000 (Tue, 22 Mar 2016)
New Revision: 40524

Modified:
   data/CVE/list
Log:
Add CVE-2016-3066/spice-gtk

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-22 16:13:50 UTC (rev 40523)
+++ data/CVE/list	2016-03-22 18:24:10 UTC (rev 40524)
@@ -1086,8 +1086,13 @@
 	RESERVED
 CVE-2016-3067
 	RESERVED
-CVE-2016-3066
+CVE-2016-3066 [hijacks clipboard and sends contents to remote servers]
 	RESERVED
+	- spice-gtk <unfixed>
+	[jessie] - spice-gtk <no-dsa> (Minor issue)
+	[wheezy] - spice-gtk <no-dsa> (Minor issue)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1320263
+	NOTE: No easy fix/tricky to address
 CVE-2016-3065
 	RESERVED
 CVE-2016-XXXX [fscanf format string security bug in flashrom layout code]