[Secure-testing-commits] r7431 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-28 23:18:38 +0000 (Wed, 28 Nov 2007)
New Revision: 7431

Modified:
   data/CVE/list
Log:
CVE-2007-6077 fixed in rails 1.2.6-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-28 23:08:10 UTC (rev 7430)
+++ data/CVE/list	2007-11-28 23:18:38 UTC (rev 7431)
@@ -168,7 +168,7 @@
 	- php5 <unfixed> (bug #453295)
 	[etch] - php4 <not-affected> (detects memory exhaustion and quits)
 CVE-2007-6077 (The session fixation protection mechanism in cgi_process.rb in Rails ...)
-	- rails <unfixed> (low; bug #452748)
+	- rails 1.2.6-1 (low; bug #452748)
 CVE-2007-6111 (Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) ...)
 	- wireshark 0.99.7~pre1-1 (low)
 	[etch] - wireshark <not-affected> (Vulnerable code not present)