[Secure-testing-commits] r9554 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-08-10 15:36:25 +0000 (Sun, 10 Aug 2008)
New Revision: 9554

Modified:
   data/CVE/list
Log:
Add bugreport to tomcat issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-10 12:17:29 UTC (rev 9553)
+++ data/CVE/list	2008-08-10 15:36:25 UTC (rev 9554)
@@ -2518,7 +2518,7 @@
 	{DSA-1602-1 DTSA-145-1}
 	- pcre3 7.6-2.1 (medium; bug #488919)
 CVE-2008-2370 (Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 ...)
-	- tomcat5.5 <unfixed>
+	- tomcat5.5 <unfixed> (bug #494504)
 CVE-2008-2369
 	RESERVED
 CVE-2008-2368
@@ -5192,7 +5192,7 @@
 	- iceape 1.1.9-1
 	- icedove 2.0.0.14-1
 CVE-2008-1232 (Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 ...)
-	- tomcat5.5 <unfixed> (low)
+	- tomcat5.5 <unfixed> (low; bug #494504)
 CVE-2008-1231 (Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and ...)
 	- jspwiki <unfixed> (bug #470477)
 CVE-2008-1230 (Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 ...)