Author: carnil
Date: 2016-11-21 20:46:08 +0000 (Mon, 21 Nov 2016)
New Revision: 46401
Modified:
data/CVE/list
Log:
Add bug reference for mcabber issue, #845258
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-11-21 20:35:16 UTC (rev 46400)
+++ data/CVE/list 2016-11-21 20:46:08 UTC (rev 46401)
@@ -1,5 +1,5 @@
-CVE-2016-XXXX [MCabber before 1.0.4 allows emote attackers to modify the
roster and intercept messages via a crafted roster-push IQ stanza]
- - mcabber <unfixed>
+CVE-2016-XXXX [MCabber before 1.0.4 allows remote attackers to modify the
roster and intercept messages via a crafted roster-push IQ stanza]
+ - mcabber <unfixed> (bug #845258)
NOTE:
https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae4908429033/raw
NOTE: Similar issue for mcabber as for gajim in CVE-2015-8688
NOTE: Separate CVE assignment is pending
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
