[Secure-testing-commits] r16067 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2011-02-05 20:46:21 +0000 (Sat, 05 Feb 2011)
New Revision: 16067

Modified:
   data/CVE/list
Log:
correct bugzilla entry

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-05 19:29:18 UTC (rev 16066)
+++ data/CVE/list	2011-02-05 20:46:21 UTC (rev 16067)
@@ -1937,11 +1937,9 @@
 CVE-2010-4573 (The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is ...)
 	NOT-FOR-US: VMware ESXi
 CVE-2010-4572 (CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, ...)
-	- perl <undetermined>
-	- libcgi-pm-perl <undetermined>
-	- libcgi-simple-perl <undetermined>
-	TODO: check
+	- bugzilla <unfixed>
 	NOTE: http://www.bugzilla.org/security/3.2.9/
+	NOTE: perl and associate packages are CVE-2010-2761 and CVE-2010-4411 (see above reference)
 CVE-2010-4571
 	RESERVED
 CVE-2010-4570 (Cross-site scripting (XSS) vulnerability in the duplicate-detection ...)