[Secure-testing-commits] r11528 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-04-01 20:55:56 +0000 (Wed, 01 Apr 2009)
New Revision: 11528

Modified:
   data/CVE/list
Log:
wordpress fixed some time ago


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-04-01 20:51:01 UTC (rev 11527)
+++ data/CVE/list	2009-04-01 20:55:56 UTC (rev 11528)
@@ -4432,9 +4432,10 @@
 CVE-2008-5696 (Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is ...)
 	NOT-FOR-US: Novell NetWare
 CVE-2008-5695 (wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 ...)
-	- wordpress <unfixed> (low; bug #510786)
+	- wordpress 2.3.2 (low; bug #510786)
 	NOTE: only the admin has manage_options capabilities by default and only editors
 	NOTE: have upload_files capabilities
+        NOTE: Only versions prior to 2.3.2 are affected according to the Debian maintainer
 CVE-2008-5694 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Sandbox
 CVE-2008-5693 (Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other ...)