[Secure-testing-commits] r45502 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-22 04:15:22 +0000 (Sat, 22 Oct 2016)
New Revision: 45502

Modified:
   data/CVE/list
Log:
Add two already public CVEs for firefox

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-21 21:10:13 UTC (rev 45501)
+++ data/CVE/list	2016-10-22 04:15:22 UTC (rev 45502)
@@ -10933,10 +10933,18 @@
 	RESERVED
 CVE-2016-5289
 	RESERVED
-CVE-2016-5288
+CVE-2016-5288 [Web content can read cache entries]
 	RESERVED
-CVE-2016-5287
+	- firefox <unfixed>
+	- firefox-esr <unfixed>
+	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1310183 (not yet public)
+	TODO: check might only affect 48 and 49, we will see at next mfsa
+CVE-2016-5287 [Crash in nsTArray_base]
 	RESERVED
+	- firefox <unfixed>
+	- firefox-esr <unfixed>
+	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1309823
+	TODO: clarify
 CVE-2016-5286
 	RESERVED
 CVE-2016-5285