[Secure-testing-commits] r46401 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Mon Nov 21 20:46:08 UTC 2016
Author: carnil
Date: 2016-11-21 20:46:08 +0000 (Mon, 21 Nov 2016)
New Revision: 46401
Modified:
data/CVE/list
Log:
Add bug reference for mcabber issue, #845258
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-11-21 20:35:16 UTC (rev 46400)
+++ data/CVE/list 2016-11-21 20:46:08 UTC (rev 46401)
@@ -1,5 +1,5 @@
-CVE-2016-XXXX [MCabber before 1.0.4 allows emote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza]
- - mcabber <unfixed>
+CVE-2016-XXXX [MCabber before 1.0.4 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza]
+ - mcabber <unfixed> (bug #845258)
NOTE: https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae4908429033/raw
NOTE: Similar issue for mcabber as for gajim in CVE-2015-8688
NOTE: Separate CVE assignment is pending
More information about the Secure-testing-commits
mailing list