[Secure-testing-commits] r47768 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jan 5 21:22:21 UTC 2017


Author: carnil
Date: 2017-01-05 21:22:21 +0000 (Thu, 05 Jan 2017)
New Revision: 47768

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2016-3956

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-05 21:10:13 UTC (rev 47767)
+++ data/CVE/list	2017-01-05 21:22:21 UTC (rev 47768)
@@ -30787,8 +30787,11 @@
 CVE-2016-3957
 	RESERVED
 CVE-2016-3956 (The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js ...)
-	- npm <unfixed>
+	- npm <unfixed> (bug #850322)
 	[jessie] - npm <no-dsa> (Minor issue)
+	NOTE: https://github.com/npm/npm/issues/8380
+	NOTE: https://github.com/npm/npm/commit/fea8cc92cee02c720b58f95f14d315507ccad401 (2.15.1)
+	NOTE: https://github.com/npm/npm/commit/f67ecad59e99a03e5aad8e93cd1a086ae087cb29 (3.8.3)
 CVE-2016-3954
 	RESERVED
 CVE-2016-3953




More information about the Secure-testing-commits mailing list