[Secure-testing-commits] r8073 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-02-04 12:18:42 +0000 (Mon, 04 Feb 2008)
New Revision: 8073

Modified:
   data/CVE/list
Log:
new issue: wml, sarge not affected, cve id pending


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-02 12:36:37 UTC (rev 8072)
+++ data/CVE/list	2008-02-04 12:18:42 UTC (rev 8073)
@@ -1,3 +1,7 @@
+CVE-2008-XXXX [insecure tmp file usage in webwml]
+	- wml <unfixed> (low; bug #463907)
+	[sarge] - wml <not-affected> (Vulnerable code is patched to use mkdtemp)
+	NOTE: CVE id pending
 CVE-2008-XXXX [deluge-torrent unspecified remote issue]
 	- deluge-torrent 0.5.8.3-1 (unknown; bug #463357)
 CVE-2008-0501 (Directory traversal vulnerability in phpMyClub 0.0.1 allows remote ...)