[Secure-testing-commits] r48209 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-19 21:22:41 +0000 (Thu, 19 Jan 2017)
New Revision: 48209

Modified:
   data/CVE/list
Log:
Update status for CVE-2016-10148

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-19 21:19:13 UTC (rev 48208)
+++ data/CVE/list	2017-01-19 21:22:41 UTC (rev 48209)
@@ -1,5 +1,9 @@
 CVE-2016-10148 (The wp_ajax_update_plugin function in ...)
-	TODO: check
+	- wordpress 4.6.1+dfsg-1
+	[jessie] - wordpress <not-affected> (wp_ajax_update_plugin function introduced in 4.2)
+	[wheezy] - wordpress <not-affected> (wp_ajax_update_plugin function introduced in 4.2)
+	NOTE: https://core.trac.wordpress.org/ticket/37490
+	NOTE: https://core.trac.wordpress.org/changeset/38168
 CVE-2017-5524
 	RESERVED
 	NOT-FOR-US: Plone