[Secure-testing-commits] r9562 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-08-13 09:45:28 +0000 (Wed, 13 Aug 2008)
New Revision: 9562

Modified:
   data/CVE/list
Log:
ruby CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-13 09:41:44 UTC (rev 9561)
+++ data/CVE/list	2008-08-13 09:45:28 UTC (rev 9562)
@@ -15,11 +15,17 @@
 CVE-2008-3658
 	RESERVED
 CVE-2008-3657 (The dl module in Ruby 1.8.5 and earlier, 1.8.5 through 1.8.6-p286, ...)
-	TODO: check
+	- ruby1.8 <unfixed> (bug #494401)
+	- ruby1.9 <unfixed> (bug #494402)
+	NOTE: http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
 CVE-2008-3656 (Algorithmic complexity vulnerability in ...)
-	TODO: check
+	- ruby1.8 <unfixed> (bug #494401)
+	- ruby1.9 <unfixed> (bug #494402)
+	NOTE: http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
 CVE-2008-3655 (Ruby 1.8.5 and earlier, 1.8.5 through 1.8.6-p286, 1.8.7 through ...)
-	TODO: check
+	- ruby1.8 <unfixed> (bug #494401)
+	- ruby1.9 <unfixed> (bug #494402)
+	NOTE: http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
 CVE-2008-3654 (Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows ...)
 	TODO: check
 CVE-2008-3653 (Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before ...)
@@ -354,11 +360,6 @@
 	TODO: check
 CVE-2008-3485 (Untrusted search path vulnerability in Citrix MetaFrame Presentation ...)
 	TODO: check
-CVE-2008-XXXX [several ruby issues]
-	- ruby1.8 <unfixed> (bug #494401)
-	- ruby1.9 <unfixed> (bug #494402)
-	NOTE: http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
-	NOTE: CVE ids requested
 CVE-2008-3532 (The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL ...)
 	- pidgin <unfixed> (bug #492434)
 	- gaim 1:2.0.0+fake.1