[Secure-testing-commits] r44789 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2016-09-21 14:10:11 +0000 (Wed, 21 Sep 2016)
New Revision: 44789

Modified:
   data/CVE/list
Log:
new libav issue
mark squidguard as unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-21 13:41:20 UTC (rev 44788)
+++ data/CVE/list	2016-09-21 14:10:11 UTC (rev 44789)
@@ -2247,6 +2247,8 @@
 	RESERVED
 CVE-2016-7477
 	RESERVED
+	- libav <unfixed> (unimportant)
+	NOTE: https://blogs.gentoo.org/ago/2016/09/20/libav-null-pointer-dereference-in-ff_put_pixels8_xy2_mmx-rnd_template-c/
 CVE-2016-7476
 	RESERVED
 CVE-2016-7475
@@ -7890,8 +7892,8 @@
 CVE-2015-8936 [squidguard reflected XSS]
 	RESERVED
 	{DLA-524-1}
-	- squidguard 1.5-5
-	[jessie] - squidguard <no-dsa> (squidGuard.cgi is installed only as example script; Minor issue)
+	- squidguard 1.5-5 (unimportant)
+	NOTE: Only affects an example script
 	NOTE: Fix applied: 16_XSS-security-bugfix.patch in 1.5-5
 	NOTE: http://www.openwall.com/lists/oss-security/2016/06/20/2
 CVE-2016-5725