[Secure-testing-commits] r9895 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-09-29 09:40:22 +0000 (Mon, 29 Sep 2008)
New Revision: 9895

Modified:
   data/CVE/list
Log:
Add information about lighttpd issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-09-28 16:15:38 UTC (rev 9894)
+++ data/CVE/list	2008-09-29 09:40:22 UTC (rev 9895)
@@ -1,3 +1,14 @@
+CVE-2008-XXXX [Unexpected behavior of url.redirect / url.rewrite config options]
+	- lighttpd 1.4.19-5 (low)
+	NOTE: http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt
+CVE-2008-XXXX [Information disclosure w/ mod_userdir]
+	- lighttpd 1.4.19-5 (low)
+	NOTE: http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt
+	NOTE: CVE id requested
+CVE-2008-XXXX [memory leak]
+	- lighttpd 1.4.19-5 (medium)
+	NOTE: http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt
+	NOTE: CVE id requested
 CVE-2008-XXXX [unsafe usage of temp file]
 	- chillispot <unfixed> (bug #500181)
 CVE-2008-XXXX [unsafe usage of temp file]