[Secure-testing-commits] r57941 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-22 21:19:22 +0000 (Wed, 22 Nov 2017)
New Revision: 57941

Modified:
   data/CVE/list
Log:
Add CVE-2017-15288/scala

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-22 21:19:11 UTC (rev 57940)
+++ data/CVE/list	2017-11-22 21:19:22 UTC (rev 57941)
@@ -4740,6 +4740,11 @@
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html
 	NOTE: Fixed by: https://git.qemu.org/gitweb.cgi?p=qemu.git;a=commit;h=eb38e1bc3740725ca29a535351de94107ec58d51
 CVE-2017-15288 (The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, ...)
+	- scala <unfixed>
+	NOTE: http://scala-lang.org/news/security-update-nov17.html
+	NOTE: https://github.com/scala/scala/pull/6108
+	NOTE: https://github.com/scala/scala/pull/6120
+	NOTE: https://github.com/scala/scala/pull/6128
 	TODO: check
 CVE-2017-15287 (There is XSS in the BouquetEditor WebPlugin for Dream Multimedia ...)
 	NOT-FOR-US: BouquetEditor WebPlugin