[Secure-testing-commits] r9712 - data/CVE

[thijs at alioth.debian.org]

Author: thijs
Date: 2008-08-31 09:26:07 +0000 (Sun, 31 Aug 2008)
New Revision: 9712

Modified:
   data/CVE/list
Log:
wordpress fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-31 09:14:11 UTC (rev 9711)
+++ data/CVE/list	2008-08-31 09:26:07 UTC (rev 9712)
@@ -319,7 +319,9 @@
 CVE-2008-3794 (Integer signedness error in the mms_ReceiveCommand function in ...)
 	- vlc 0.8.6.h-4 (medium; bug #496265)
 CVE-2008-3747 (The (1) get_edit_post_link and (2) get_edit_comment_link functions in ...)
-	- wordpress <unfixed> (low; bug #497216)
+	- wordpress 2.5.1-6 (low; bug #497216)
+	NOTE: not so sure about etch. It contains this code but doesn't have the force-ssl
+	NOTE: mechanism in the first place.
 CVE-2008-3746 (neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of ...)
 	- neon27 0.28.2-4
 CVE-2008-3739 (Cross-site scripting (XSS) vulnerability in (1) System Consultants ...)