[Secure-testing-commits] r6234 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-08-04 12:02:22 +0000 (Sat, 04 Aug 2007)
New Revision: 6234

Modified:
   data/CVE/list
Log:
CVE-2005-4857: ezpublish not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-04 11:57:22 UTC (rev 6233)
+++ data/CVE/list	2007-08-04 12:02:22 UTC (rev 6234)
@@ -1298,7 +1298,7 @@
 CVE-2005-4858 (Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in ...)
 	TODO: check
 CVE-2005-4857 (eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and ...)
-	TODO: check
+	- ezpublish <not-affected> (Debian's version is too old)
 CVE-2005-4856 (The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, ...)
 	TODO: check
 CVE-2005-4855 (Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, ...)