[Secure-testing-commits] r9196 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-06-30 16:48:17 +0000 (Mon, 30 Jun 2008)
New Revision: 9196

Modified:
   data/CVE/list
Log:
add reference to python-werkzeug issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-06-30 16:08:45 UTC (rev 9195)
+++ data/CVE/list	2008-06-30 16:48:17 UTC (rev 9196)
@@ -15,6 +15,8 @@
 	NOTE: CVE id requested
 CVE-2008-XXXX [unspecified python-werkzeug issue]
 	- python-werkzeug 0.3.1-1 (unknown)
+	NOTE: http://lucumr.pocoo.org/cogitations/2008/06/24/werkzeug-031-released/
+	NOTE: contacted upstream for exploit vector
 CVE-2008-XXXX [sudo does not flush stdin on timeout]
 	- sudo 1.6.9p12-1
 	[etch] - sudo <not-affected> (Issue was introduced in 1.6.9)