[Secure-testing-commits] r48197 - data/CVE

[Markus Koschany]

Author: apo
Date: 2017-01-19 17:46:49 +0000 (Thu, 19 Jan 2017)
New Revision: 48197

Modified:
   data/CVE/list
Log:
CVE-2016-10074, libphp-swiftmailer: Add more information.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-19 17:44:54 UTC (rev 48196)
+++ data/CVE/list	2017-01-19 17:46:49 UTC (rev 48197)
@@ -3703,6 +3703,8 @@
 CVE-2016-10074 (The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer ...)
 	- libphp-swiftmailer 5.4.2-1.1 (bug #849626)
 	NOTE: https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html
+	NOTE: https://github.com/swiftmailer/swiftmailer/issues/844
+	NOTE: Fixed by https://github.com/swiftmailer/swiftmailer/commit/e6ccf40d856af9598b76eb313b215eed25ae9e86
 CVE-2016-10073
 	RESERVED
 CVE-2016-10072 (** DISPUTED ** WampServer 3.0.6 has two files called 'wampmanager.exe' ...)