[Secure-testing-commits] r44968 - data/CVE

[Florian Weimer]

Author: fw
Date: 2016-10-02 20:09:40 +0000 (Sun, 02 Oct 2016)
New Revision: 44968

Modified:
   data/CVE/list
Log:
Summary: nspr, nss unprotected environment variables


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-02 18:43:44 UTC (rev 44967)
+++ data/CVE/list	2016-10-02 20:09:40 UTC (rev 44968)
@@ -1,3 +1,8 @@
+CVE-2016-XXXX [nspr, nss: unprotected environment variables]
+	- nspr 2:4.12-1 (low)
+	- nss 2:3.23-1 (low)
+	NOTE: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.22.1_release_notes
+	NOTE: http://www.openwall.com/lists/oss-security/2016/10/02/4
 CVE-2016-XXXX [ghostscript: various sandbox escapes]
 	- ghostscript <unfixed> (high; bug #839260)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/09/29/3