Author: apo
Date: 2017-02-01 04:54:42 +0000 (Wed, 01 Feb 2017)
New Revision: 48640
Modified:
data/CVE/list
Log:
CVE-2017-5487,wordpress: Mark as not-affected in Wheezy
The vulnerable code was introduced later.
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-02-01 02:29:33 UTC (rev 48639)
+++ data/CVE/list 2017-02-01 04:54:42 UTC (rev 48640)
@@ -1226,6 +1226,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
CVE-2017-5487
(wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in ...)
- wordpress 4.7.1+dfsg-1 (bug #851310)
+ [wheezy] - wordpress <not-affected> (vulnerable code not present)
NOTE: http://www.openwall.com/lists/oss-security/2017/01/14/1
NOTE: https://wpvulndb.com/vulnerabilities/8715
NOTE:
https://github.com/WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
