[Secure-testing-commits] r44934 - data/CVE

[Florian Weimer]

Author: fw
Date: 2016-09-29 05:45:38 +0000 (Thu, 29 Sep 2016)
New Revision: 44934

Modified:
   data/CVE/list
Log:
Summary: CVE-2013-5653 ghostscript


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-28 21:10:13 UTC (rev 44933)
+++ data/CVE/list	2016-09-29 05:45:38 UTC (rev 44934)
@@ -81894,8 +81894,11 @@
 	NOT-FOR-US: fog-dragonfly Ruby Gem
 CVE-2013-5670 (Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php ...)
 	- serendipity <not-affected> (Spellcheck plugin not included in 1.5.x)
-CVE-2013-5653
+CVE-2013-5653 [Ghostscript information disclosure through getenv, filenameforall]
 	RESERVED
+	- ghostscript <unfixed> (low; bug #839118)
+	NOTE: http://bugs.ghostscript.com/show_bug.cgi?id=694724
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=ab109aaeb3ddba59518b036fb288402a65cf7ce8
 CVE-2013-5652
 	RESERVED
 CVE-2013-5650 (Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before ...)