[Secure-testing-commits] r11198 - in data: CVE DSA

thijs at alioth.debian.org thijs at alioth.debian.org
Thu Feb 12 10:22:04 UTC 2009


Author: thijs
Date: 2009-02-12 10:22:03 +0000 (Thu, 12 Feb 2009)
New Revision: 11198

Modified:
   data/CVE/list
   data/DSA/list
Log:
netcraft confirms it: ..22 is a duplicate, so mark as fixed by the DSA that
fixed the ..21 and contact mitre.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-02-12 09:14:14 UTC (rev 11197)
+++ data/CVE/list	2009-02-12 10:22:03 UTC (rev 11198)
@@ -2319,7 +2319,7 @@
 	NOT-FOR-US: Apple QuickTime
 CVE-2008-5622 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
 	- phpmyadmin 4:2.11.8.1-5
-	NOTE: may be a duplicate of CVE-2008-5621, am investigating (thijs)
+	NOTE: is a duplicate of CVE-2008-5621, contacted mitre
 CVE-2008-5621 (Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x ...)
 	{DSA-1723-1}
 	- phpmyadmin 4:2.11.8.1-5

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2009-02-12 09:14:14 UTC (rev 11197)
+++ data/DSA/list	2009-02-12 10:22:03 UTC (rev 11198)
@@ -1,5 +1,5 @@
 [11 Feb 2009] DSA-1723-1 phpmyadmin - arbitrary code execution
-	{CVE-2008-5621}
+	{CVE-2008-5621 CVE-2008-5622}
 	[etch] - phpmyadmin 4:2.9.1.1-10
 [11 Feb 2009] DSA-1722-1 libpam-heimdal - local privilege
 	{CVE-2009-0361}




More information about the Secure-testing-commits mailing list