[Secure-testing-commits] r56864 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Oct 19 11:54:11 UTC 2017


Author: carnil
Date: 2017-10-19 11:54:11 +0000 (Thu, 19 Oct 2017)
New Revision: 56864

Modified:
   data/CVE/list
Log:
Update CVE-2017-15612

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-19 10:42:02 UTC (rev 56863)
+++ data/CVE/list	2017-10-19 11:54:11 UTC (rev 56864)
@@ -50,7 +50,7 @@
 	RESERVED
 CVE-2017-15612 (mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such ...)
 	- mistune <unfixed>
-	TODO: check
+	NOTE: https://github.com/lepture/mistune/pull/140
 CVE-2017-15611 (In Octopus before 3.17.7, an authenticated user who was explicitly ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2017-15610 (An issue was discovered in Octopus before 3.17.7. When the special ...)




More information about the Secure-testing-commits mailing list