[Secure-testing-commits] r9317 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-07-12 18:18:31 +0000 (Sat, 12 Jul 2008)
New Revision: 9317

Modified:
   data/CVE/list
Log:
Add information about drupal issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-12 09:45:34 UTC (rev 9316)
+++ data/CVE/list	2008-07-12 18:18:31 UTC (rev 9317)
@@ -1,3 +1,9 @@
+CVE-2008-XXXX [several issues in last upstream announcement]
+	- drupal5 <unfixed> (bug #490559)
+	- drupal-4.7 <not-affected>
+	NOTE: http://drupal.org/node/280571
+	NOTE: Upstream advisory states that drupal5 is only affected to a few of the issues
+	NOTE: drupal-4.7 is not mentioned as vulnerable
 CVE-2008-3145 [DoS via injecting a series of malformed packets]
 	- wireshark <unfixed> (low)
 	NOTE: http://www.wireshark.org/security/wnpa-sec-2008-04.html