[Secure-testing-commits] r48809 - data/CVE

[Markus Koschany]

Author: apo
Date: 2017-02-09 21:31:25 +0000 (Thu, 09 Feb 2017)
New Revision: 48809

Modified:
   data/CVE/list
Log:
CVE-2016-6621,phpmyadmin: Fixed since 4:4.6.6-1

Upstream finally released more information about CVE-2016-6621. This issue is
fixed in Stretch and Sid. Wheezy and Jessie are still affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-09 21:27:42 UTC (rev 48808)
+++ data/CVE/list	2017-02-09 21:31:25 UTC (rev 48809)
@@ -24061,12 +24061,10 @@
 	- phpmyadmin 4:4.6.4+dfsg1-1
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-45/
 CVE-2016-6621 (The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before ...)
-	- phpmyadmin <undetermined>
+	- phpmyadmin 4:4.6.6-1
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-44/
 	NOTE: https://github.com/phpmyadmin/phpmyadmin/issues/12481
-	NOTE: The issue is not public yet, upstream does not want to
-	NOTE: disclose details until fix ready
-	TODO: wait for upstream to release the PMASA-2016-44
+	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-44/
 CVE-2016-6620 (An issue was discovered in phpMyAdmin. Some data is passed to the PHP ...)
 	{DLA-626-1}
 	- phpmyadmin 4:4.6.4+dfsg1-1