[Secure-testing-commits] r11073 - in data: CVE DTSA NMU

[white at alioth.debian.org]

Author: white
Date: 2009-01-28 17:05:35 +0000 (Wed, 28 Jan 2009)
New Revision: 11073

Modified:
   data/CVE/list
   data/DTSA/list
   data/NMU/list
Log:
Fix moin XSS issues in unstable/testing

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-28 16:56:28 UTC (rev 11072)
+++ data/CVE/list	2009-01-28 17:05:35 UTC (rev 11073)
@@ -4,7 +4,7 @@
 	- rt2570 1.1.0+cvs20080623-2 (bug #513001)
 	- rt73 1:1.0.3.6-cvs20080623-dfsg1-3 (bug #512995)
 CVE-2009-0312 [moin: XSS in antispam.py]
-	- moin <unfixed> (low)
+	- moin 1.8.1-1.1 (low)
 	NOTE: http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad
 CVE-2009-0276
 	RESERVED
@@ -80,8 +80,7 @@
 CVE-2009-0261 (Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 ...)
 	NOT-FOR-US: EffectMatrix Total Video Player
 CVE-2009-0260 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	- moin <unfixed> (bug #513158; low)
-	NOTE: version 1.8.1-1 in unstable vulnerable despite the CVE description
+	- moin 1.8.1-1.1 (bug #513158; low)
 CVE-2008-5964 (Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 ...)
 	NOT-FOR-US: Social ImpressCMS
 CVE-2008-5963 (Eval injection vulnerability in library/setup/rpc.php in Gravity ...)

Modified: data/DTSA/list
===================================================================
--- data/DTSA/list	2009-01-28 16:56:28 UTC (rev 11072)
+++ data/DTSA/list	2009-01-28 17:05:35 UTC (rev 11073)
@@ -557,3 +557,6 @@
 [January 25th, 2009] DTSA-186-1 mediawiki - several vulnerabilities
 	{CVE-2008-5249 CVE-2008-5250 CVE-2008-5252 CVE-2008-5687}
 	[lenny] - mediawiki 1:1.12.0-2lenny2
+[January 28th, 2009] DTSA-187-1 moin - cross-site scripting vulnerabilities
+	{CVE-2009-0260 CVE-2009-0312}
+	[lenny] - moin 1.7.1-3+lenny1

Modified: data/NMU/list
===================================================================
--- data/NMU/list	2009-01-28 16:56:28 UTC (rev 11072)
+++ data/NMU/list	2009-01-28 17:05:35 UTC (rev 11073)
@@ -134,3 +134,4 @@
 2008-12-10 awstats 6.7.dfsg-5.1
 2008-12-24 screenie 1.30.0-5.1
 2009-01-15 uw-imap 2007b~dfsg-1.1
+2009-01-28 moin 1.8.1-1.1