[Secure-testing-commits] r16037 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-02-02 20:26:18 +0000 (Wed, 02 Feb 2011)
New Revision: 16037

Modified:
   data/CVE/list
   data/ospu-candidates.txt
   data/spu-candidates.txt
Log:
eclipse bugnum and spu candidate


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-02 20:23:00 UTC (rev 16036)
+++ data/CVE/list	2011-02-02 20:26:18 UTC (rev 16037)
@@ -668,7 +668,7 @@
 	[lenny] - gif2png <no-dsa> (Minor issue)
 	[squeeze] - gif2png <no-dsa> (Minor issue)
 CVE-2008-7271 (Multiple cross-site scripting (XSS) vulnerabilities in the Help ...)
-	- eclipse <unfixed> (low)
+	- eclipse <unfixed> (low; bug #611849)
 	[squeeze] - eclipse <no-dsa> (Minor issue)
 	[lenny] - eclipse <no-dsa> (Minor issue)
 CVE-2011-0426
@@ -1163,7 +1163,7 @@
 	- linux-2.6 2.6.32-30
 	[lenny] - linux-2.6 <not-affected> (Introduced in 2.6.28)
 CVE-2010-4647 (Multiple cross-site scripting (XSS) vulnerabilities in the Help ...)
-	- eclipse <unfixed> (low)
+	- eclipse <unfixed> (low; bug #611849)
 	[squeeze] - eclipse <no-dsa> (Minor issue)
 	[lenny] - eclipse <no-dsa> (Minor issue)
 CVE-2010-4646 (Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 ...)

Modified: data/ospu-candidates.txt
===================================================================
--- data/ospu-candidates.txt	2011-02-02 20:23:00 UTC (rev 16036)
+++ data/ospu-candidates.txt	2011-02-02 20:26:18 UTC (rev 16037)
@@ -132,6 +132,11 @@
 
 --
 
+eclipse (CVE-2008-7271/CVE-2010-4647)
+#611849
+
+--
+
 evolution (CVE-2009-1631)
 #526409
 notified maintainer through initial bugreport

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2011-02-02 20:23:00 UTC (rev 16036)
+++ data/spu-candidates.txt	2011-02-02 20:26:18 UTC (rev 16037)
@@ -2,3 +2,10 @@
 but which could be fixed in a stable point update if people feel like
 it. If someone wants to address these, please add a note about it
 and get in contact with debian-release at lists.debian.org
+
+--
+
+eclipse (CVE-2008-7271/CVE-2010-4647)
+#611849
+
+--