Author: micha
Date: 2016-12-01 21:26:01 +0000 (Thu, 01 Dec 2016)
New Revision: 46690
Modified:
data/CVE/list
Log:
/data/CVE/list: setting security level 'high', according to Mozilla an exploit
is already in use in the wild
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-12-01 21:10:11 UTC (rev 46689)
+++ data/CVE/list 2016-12-01 21:26:01 UTC (rev 46690)
@@ -3170,8 +3170,8 @@
CVE-2016-9079 [SVG Animation Remote Code Execution]
RESERVED
{DSA-3728-1}
- - firefox 50.0.2-1
- - firefox-esr 45.5.1esr-1
+ - firefox 50.0.2-1 (high)
+ - firefox-esr 45.5.1esr-1 (high)
- icedove 1:45.5.1-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079
CVE-2016-9078 [data: URL can inherit wrong origin after an HTTP redirect]
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
