[Secure-testing-commits] r52541 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-06-13 20:44:43 +0000 (Tue, 13 Jun 2017)
New Revision: 52541

Modified:
   data/CVE/list
   data/DSA/list
Log:
libosip2 DSA
phpmyadmin no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-13 20:22:02 UTC (rev 52540)
+++ data/CVE/list	2017-06-13 20:44:43 UTC (rev 52541)
@@ -26108,6 +26108,7 @@
 CVE-2016-9849 (An issue was discovered in phpMyAdmin. It is possible to bypass ...)
 	{DLA-757-1}
 	- phpmyadmin 4:4.6.5.1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-60/
 CVE-2016-9850 (An issue was discovered in phpMyAdmin. Username matching for the ...)
 	{DLA-757-1}
@@ -26167,6 +26168,7 @@
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-68/
 CVE-2016-9864 (An issue was discovered in phpMyAdmin. With a crafted username or a ...)
 	{DLA-757-1}
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	- phpmyadmin 4:4.6.5.1-1
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-69/
 CVE-2016-9865 (An issue was discovered in phpMyAdmin. Due to a bug in serialized ...)
@@ -35474,26 +35476,32 @@
 	NOTE: Fixed by: https://core.trac.wordpress.org/changeset/37124
 	NOTE: Fixed by: https://github.com/WordPress/WordPress/commit/cb2b3ed3c7d68f6505bfb5c90257e6aaa3e5fcb9
 CVE-2016-6633 (An issue was discovered in phpMyAdmin. phpMyAdmin can be used to ...)
-	- phpmyadmin 4:4.6.4+dfsg1-1
+	- phpmyadmin 4:4.6.4+dfsg1-1 (unimportant)
 	[wheezy] - phpmyadmin <not-affected> (Vulnerable code not present)
+	NOTE: dbase extension not available in Debian
 CVE-2016-6632 (An issue was discovered in phpMyAdmin where, under certain conditions, ...)
 	- phpmyadmin 4:4.6.4+dfsg1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	[wheezy] - phpmyadmin <not-affected> (Vulnerable code not present)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-55/
 CVE-2016-6631 (An issue was discovered in phpMyAdmin. A user can execute a remote ...)
 	{DLA-626-1}
 	- phpmyadmin 4:4.6.4+dfsg1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-54/
 CVE-2016-6630 (An issue was discovered in phpMyAdmin. An authenticated user can ...)
 	{DLA-626-1}
 	- phpmyadmin 4:4.6.4+dfsg1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-53/
 CVE-2016-6629 (An issue was discovered in phpMyAdmin involving the ...)
 	- phpmyadmin 4:4.6.4+dfsg1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	[wheezy] - phpmyadmin <not-affected> (Vulnerable code not present)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-52/
 CVE-2016-6628 (An issue was discovered in phpMyAdmin. An attacker may be able to ...)
 	- phpmyadmin 4:4.6.4+dfsg1-1
+	[jessie] - phpmyadmin <no-dsa> (Minor issue)
 	[wheezy] - phpmyadmin <not-affected> (Vulnerable code not present)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2016-51/
 CVE-2016-6627 (An issue was discovered in phpMyAdmin. An attacker can determine the ...)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-06-13 20:22:02 UTC (rev 52540)
+++ data/DSA/list	2017-06-13 20:44:43 UTC (rev 52541)
@@ -1,3 +1,6 @@
+[13 Jun 2017] DSA-3879-1 libosip2 - security update
+	{CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853}
+	[jessie] - libosip2 4.1.0-2+deb8u1
 [12 Jun 2017] DSA-3878-1 zziplib - security update
 	{CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981}
 	[jessie] - zziplib 0.13.62-3+deb8u1