[Secure-testing-commits] r8326 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2008-03-13 22:26:31 +0000 (Thu, 13 Mar 2008)
New Revision: 8326

Modified:
   data/CVE/list
Log:
- new mediawiki issue
- ruby1.9 fixed
- adjust vlc fixed version


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-03-13 21:48:34 UTC (rev 8325)
+++ data/CVE/list	2008-03-13 22:26:31 UTC (rev 8326)
@@ -1,3 +1,5 @@
+CVE-2008-XXXX [Mediawiki Cross-site information leak]
+	- mediawiki 1:1.11.2-1 (low)
 CVE-2008-1288 (IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or ...)
 	NOT-FOR-US: IBM Rational ClearQuest
 CVE-2008-1287 (IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 ggenerates different error ...)
@@ -347,7 +349,7 @@
 	NOTE: CVE id pending
 CVE-2008-1145 (Directory traversal vulnerability in WEBrick 1.8 before 1.8.5-p115 and ...)
 	- ruby1.8 1.8.6.114-1 (unimportant; bug #469475)
-	- ruby1.9 <unfixed> (unimportant; bug #469482)
+	- ruby1.9 1.9.0.1-1 (unimportant; bug #469482)
 	[sarge] - ruby1.8 <no-dsa> (case insensitive FS, corner case)
 	[etch] - ruby1.8 <no-dsa> (case insensitive FS, corner case)
 	[etch] - ruby1.9 <no-dsa> (case insensitive FS, corner case)
@@ -668,7 +670,7 @@
 	- mysql-dfsg-5.0 5.0.32-1
 CVE-2008-0984 (The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as ...)
 	{DTSA-116-1}
-	- vlc 0.8.6.c-6 (medium; bug #467652)
+	- vlc 0.8.6.e-1 (medium; bug #467652)
 CVE-2008-6426
 	REJECTED
 CVE-2008-0982 (Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to ...)