[Secure-testing-commits] r7302 - data/CVE

[micah at alioth.debian.org]

Author: micah
Date: 2007-11-14 23:58:26 +0000 (Wed, 14 Nov 2007)
New Revision: 7302

Modified:
   data/CVE/list
Log:
fix for 5379 and 5380 is also in rails_1.2.5-1 instead

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-14 23:32:02 UTC (rev 7301)
+++ data/CVE/list	2007-11-14 23:58:26 UTC (rev 7302)
@@ -2066,9 +2066,9 @@
 CVE-2007-5381 (Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco ...)
 	NOT-FOR-US: Line Printer Daemon (LPD) Cisco
 CVE-2007-5380 (Session fixation vulnerability in Rails before 1.2.4, as used for Ruby ...)
-	- rails 1.2.4-1
+	- rails 1.2.5-1
 CVE-2007-5379 (Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers ...)
-	- rails 1.2.4-1
+	- rails 1.2.5-1
 CVE-2007-5378 (Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk ...)
 	- tk8.3 8.3.5-10 (medium; bug #446465)
 	- tk8.4 8.4.16-1 (medium)