[Secure-testing-commits] r19048 - data/CVE

[Florian Weimer]

Author: fw
Date: 2012-04-24 09:24:14 +0000 (Tue, 24 Apr 2012)
New Revision: 19048

Modified:
   data/CVE/list
Log:
CVE-2012-1039, CVE-2009-0933: dotclear fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-04-24 09:17:01 UTC (rev 19047)
+++ data/CVE/list	2012-04-24 09:24:14 UTC (rev 19048)
@@ -3199,8 +3199,7 @@
 CVE-2012-1040
 	RESERVED
 CVE-2012-1039 (Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before ...)
-	- dotclear <unfixed>
-	TODO: check
+	- dotclear 2.4.2+dfsg-1
 CVE-2012-1038
 	RESERVED
 CVE-2012-1037
@@ -46128,8 +46127,7 @@
 	[lenny] - linux-2.6 <not-affected> (Vulnerability was introduced in 2.6.27-rc9)
 	- linux-2.6.24 <not-affected> (Vulnerability was introduced in 2.6.27-rc9)
 CVE-2009-0933 (Cross-site scripting (XSS) vulnerability in the administrative ...)
-	- dotclear <unfixed>
-	TODO: check
+	- dotclear <not-affected> (Fixed before initial upload to archive)
 CVE-2009-0932 (Directory traversal vulnerability in framework/Image/Image.php in ...)
 	{DSA-1765-1}
 	- horde3 3.2.2+debian0-2 (bug #513265; medium)