[Secure-testing-commits] r7955 - data/CVE

stef-guest at alioth.debian.org stef-guest at alioth.debian.org
Fri Jan 18 06:18:20 UTC 2008


Author: stef-guest
Date: 2008-01-18 06:18:17 +0000 (Fri, 18 Jan 2008)
New Revision: 7955

Modified:
   data/CVE/list
Log:
apache2 fixes

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-17 21:14:46 UTC (rev 7954)
+++ data/CVE/list	2008-01-18 06:18:17 UTC (rev 7955)
@@ -1175,11 +1175,11 @@
 CVE-2007-6423 (** DISPUTED ** ...)
 	- apache2 <not-affected> (disputed / only for Windows)
 CVE-2007-6422 (The balancer_handler function in mod_proxy_balancer in the Apache HTTP ...)
-	- apache2 <unfixed> (low)
+	- apache2 2.2.8-1 (low)
 	[etch] - apache2 <no-dsa> (minor issue)
 	[sarge] - apache2 <not-affected> (vulnerable code introduced in 2.2)
 CVE-2007-6421 (Cross-site scripting (XSS) vulnerability in balancer-manager in ...)
-	- apache2 <unfixed> (low)
+	- apache2 2.2.8-1 (low)
 	[etch] - apache2 <no-dsa> (minor issue)
 	[sarge] - apache2 <not-affected> (vulnerable code introduced in 2.2)
 CVE-2007-6420 (Cross-site request forgery (CSRF) vulnerability in the ...)
@@ -1252,7 +1252,7 @@
 	[etch] - gnome-screensaver <no-dsa> (Minor issue)
 CVE-2007-6388 (Cross-site scripting (XSS) vulnerability in mod_status in the Apache ...)
 	- apache <unfixed> (low)
-	- apache2 <unfixed> (low)
+	- apache2 2.2.8-1 (low)
 CVE-2007-6358 (pdftops.pl before 1.20 in alternate pdftops filter allows local users ...)
 	{DSA-1437-1}
 	- cupsys 1.3.5-1 (low; bug #456960)
@@ -1692,7 +1692,7 @@
 CVE-2008-0006
 	RESERVED
 CVE-2008-0005 (mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before ...)
-	- apache2 <unfixed> (low)
+	- apache2 2.2.8-1 (low)
 	- apache <unfixed> (low)
 CVE-2008-0004
 	RESERVED
@@ -5547,7 +5547,7 @@
 	[sarge] - apache <no-dsa> (minor issue)
 	[etch] - apache2 <no-dsa> (minor issue)
 	[etch] - apache <no-dsa> (minor issue)
-	- apache2 <unfixed> (low)
+	- apache2 2.2.8-1 (low)
 	- apache <unfixed> (low)
 	NOTE: pending for apache2 2.2.3-4+etch4 / etch r3
 	NOTE: pending for apache 1.3.34-4.1+etch1 / etch r3




More information about the Secure-testing-commits mailing list