[Secure-testing-commits] r12630 - in data: . CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-08-18 13:54:05 +0000 (Tue, 18 Aug 2009)
New Revision: 12630

Modified:
   data/CVE/list
   data/ospu-candidates.txt
   data/spu-candidates.txt
Log:
- spu notifications
- OCS Inventory NG Server Sql injection fixed in unstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-08-18 07:50:58 UTC (rev 12629)
+++ data/CVE/list	2009-08-18 13:54:05 UTC (rev 12630)
@@ -33,7 +33,7 @@
 CVE-2008-6974 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
 	NOT-FOR-US: DD-WRT
 CVE-2009-XXXX [Sql injection in OCS Inventory NG Server]
-	- ocsinventory-server <unfixed> (low; bug #541995)
+	- ocsinventory-server 1.02.1-1 (low; bug #541995)
 	NOTE: http://seclists.org/fulldisclosure/2009/Aug/0143.html
 	NOTE: Authentication is needed
 	NOTE: cve id already requested on oss-sec

Modified: data/ospu-candidates.txt
===================================================================
--- data/ospu-candidates.txt	2009-08-18 07:50:58 UTC (rev 12629)
+++ data/ospu-candidates.txt	2009-08-18 13:54:05 UTC (rev 12630)
@@ -425,6 +425,7 @@
 mimedecode
 potential dos/crash due to invalid input
 #530430
+orphaned
 
 --
 
@@ -766,6 +767,7 @@
 xemacs21 (CVE-2009-2688)
 #540470
 Patches at https://bugzilla.redhat.com/show_bug.cgi?id=511994
+notified maintainer
 
 --
 

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2009-08-18 07:50:58 UTC (rev 12629)
+++ data/spu-candidates.txt	2009-08-18 13:54:05 UTC (rev 12630)
@@ -45,6 +45,7 @@
 
 firebird2.0 (CVE-2009-2620)
 #539477
+notified maintainer
 
 --
 
@@ -206,11 +207,10 @@
 bug #480877
 notified maintainer
 
---
-
 xemacs21 (CVE-2009-2688)
 #540470
 Patches at https://bugzilla.redhat.com/show_bug.cgi?id=511994
+notified maintainer
 
 --