[Secure-testing-commits] r10990 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2009-01-19 20:56:38 +0000 (Mon, 19 Jan 2009)
New Revision: 10990

Modified:
   data/CVE/list
Log:
CVE-2008-5516, CVE-2008-5517: git-core


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-19 20:54:07 UTC (rev 10989)
+++ data/CVE/list	2009-01-19 20:56:38 UTC (rev 10990)
@@ -1108,9 +1108,10 @@
 CVE-2008-5518
 	RESERVED
 CVE-2008-5517 (The web interface in git in SUSE openSUSE 10.3 allows remote attackers ...)
-	TODO: check
-CVE-2008-5516
+	- git-core <unfixed> (low; bug #512330)
+CVE-2008-5516 [gitweb shell command injection through snapshots and pickaxe search]
 	RESERVED
+	- git-core 1:1.5.6-1
 CVE-2008-5515
 	RESERVED
 CVE-2008-5514 (Off-by-one error in the rfc822_output_char function in the ...)