[Secure-testing-commits] r42175 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2016-05-30 21:58:58 +0000 (Mon, 30 May 2016)
New Revision: 42175

Modified:
   data/CVE/list
Log:
libimobiledevice, libusbmuxd, harfbuzz no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-30 21:41:34 UTC (rev 42174)
+++ data/CVE/list	2016-05-30 21:58:58 UTC (rev 42175)
@@ -308,9 +308,11 @@
 CVE-2016-5104
 	RESERVED
 	- libimobiledevice <unfixed> (bug #825553)
+	[jessie] - libimobiledevice <no-dsa> (Minor issue)
 	[wheezy] - libimobiledevice <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e
 	- libusbmuxd <unfixed> (bug #825554)
+	[jessie] - libusbmuxd <no-dsa> (Minor issue)
 	NOTE: https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196
 CVE-2016-5103 [XSS vulnerability in mail content page]
 	RESERVED
@@ -8967,12 +8969,12 @@
 	NOTE: http://lists.xymon.com/pipermail/xymon/2016-February/042986.html
 CVE-2016-2052 (Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used ...)
 	- harfbuzz 1.2.6-1
+	[jessie] - harfbuzz <no-dsa> (Minor issue, will be fixed via spu)
 	- chromium-browser 48.0.2564.82-1
 	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 	NOTE: https://code.google.com/p/chromium/issues/detail?id=544270
 	NOTE: https://cgit.freedesktop.org/harfbuzz/commit/?id=63ef0b41dc48d6112d1918c1b1de9de8ea90adb5
 	NOTE: https://cgit.freedesktop.org/harfbuzz/commit/?id=613e630617074eb9b62b794cc37c9b42a7fb079b
-	TODO: check stable/oldstable
 CVE-2016-2051 (Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, ...)
 	- libv8 <unfixed> (unimportant)
 	NOTE: libv8 not covered by security support