[Secure-testing-commits] r48528 - data/CVE

Sun Jan 29 15:44:17 UTC 2017

Author: anarcat
Date: 2017-01-29 15:44:17 +0000 (Sun, 29 Jan 2017)
New Revision: 48528

Modified:
   data/CVE/list
Log:
add new calibre issue (bug #853004)



Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-29 15:38:16 UTC (rev 48527)
+++ data/CVE/list	2017-01-29 15:44:17 UTC (rev 48528)
@@ -1,3 +1,6 @@
+CVE-2017-XXXX [javascript in books can access files on the computer using XMLHttpRequest]
+	- calibre 2.75.1+dfsg-1 (bug #853004)
+	NOTE: upstream fix: https://github.com/kovidgoyal/calibre/commit/3a89718664cb8
 CVE-2017-XXXX [use after free in libmysqlclient.so]
 	- mariadb-10.1 <undetermined>
 	- mariadb-10.0 <undetermined>


