[Secure-testing-commits] r56676 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-13 12:01:36 +0000 (Fri, 13 Oct 2017)
New Revision: 56676

Modified:
   data/CVE/list
Log:
Update information for CVE-2016-9263/wordpress

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-13 11:04:14 UTC (rev 56675)
+++ data/CVE/list	2017-10-13 12:01:36 UTC (rev 56676)
@@ -44532,8 +44532,9 @@
 CVE-2016-9267
 	RESERVED
 CVE-2016-9263 (WordPress through 4.8.2, when domain-based flashmediaelement.swf ...)
-	- wordpress <unfixed>
-	TODO: check
+	- wordpress 4.1+dfsg-1
+	NOTE: https://opnsec.com/2017/10/cve-2016-9263-unpatched-xsf-vulnerability-in-wordpress/
+	NOTE: flashmediaelement.swf removed from source tree starting in 4.1+dfsg-1
 CVE-2016-9447 (The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote ...)
 	{DSA-3713-1 DLA-712-1}
 	- gst-plugins-bad0.10 <removed>