[Secure-testing-commits] r10686 - data/CVE

[atomo64-guest at alioth.debian.org]

Author: atomo64-guest
Date: 2008-12-13 00:20:12 +0000 (Sat, 13 Dec 2008)
New Revision: 10686

Modified:
   data/CVE/list
Log:
Update on issues affecting twiki


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-12-12 22:32:17 UTC (rev 10685)
+++ data/CVE/list	2008-12-13 00:20:12 UTC (rev 10686)
@@ -384,9 +384,9 @@
 CVE-2008-5306 (SQL injection vulnerability in admin/index.php in PG Real Estate ...)
 	NOT-FOR-US: PG Real Estate Solution
 CVE-2008-5305 (Eval injection vulnerability in TWiki before 4.2.4 allows remote ...)
-	TODO: check
+	- twiki <unfixed> (medium; bug #508257)
 CVE-2008-5304 (Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows ...)
-	- twiki <unfixed> (bug #508256)
+	- twiki <unfixed> (low; bug #508256)
 CVE-2008-5303 (Race condition in the rmtree function in File::Path 1.08 ...)
 	{DSA-1678-1}
 	- perl 5.10.0-18