[Secure-testing-commits] r42199 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2016-05-31 23:47:11 +0000 (Tue, 31 May 2016)
New Revision: 42199

Modified:
   data/CVE/list
Log:
Mark mediawiki issues affecting wheezy as <end-of-life>

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-31 22:25:18 UTC (rev 42198)
+++ data/CVE/list	2016-05-31 23:47:11 UTC (rev 42199)
@@ -32209,51 +32209,61 @@
 	[wheezy] - xdeb <no-dsa> (Minor issue)
 CVE-2015-2931 (Incomplete blacklist vulnerability in includes/upload/UploadBase.php ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2932 (Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2933 (Cross-site scripting (XSS) vulnerability in the Html class in ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2934 (MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2935 (MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2936 (MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2937 (MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2938 (Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2939 (Cross-site scripting (XSS) vulnerability in the Scribunto extension ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1
 CVE-2015-2940 (Cross-site request forgery (CSRF) vulnerability in the CheckUser ...)
 	- mediawiki 1:1.19.20+dfsg-2.3
+	[wheezy] - mediawiki <end-of-life> (Not supported in Wheezy LTS)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
 	NOTE: http://www.openwall.com/lists/oss-security/2015/04/01/1