[Secure-testing-commits] r42004 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-25 06:53:29 +0000 (Wed, 25 May 2016)
New Revision: 42004

Modified:
   data/CVE/list
Log:
Update status for CVE-2015-8834

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-25 06:35:31 UTC (rev 42003)
+++ data/CVE/list	2016-05-25 06:53:29 UTC (rev 42004)
@@ -3595,7 +3595,8 @@
 CVE-2015-8834 (Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in ...)
 	- wordpress 4.2.2+dfsg-1
 	NOTE: https://wordpress.org/news/2015/05/wordpress-4-2-2/
-	TODO: check if incomplete fix for CVE-2015-3440 applied
+	NOTE: Follow-up patch from 4.2.1 -> 4.2.2 for wp-includes/wp-db.php seens not applied
+	TODO: double-check
 CVE-2016-3661
 	RESERVED
 CVE-2016-3660